medium5.0
CVE-2009-3276
Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a den…
Impact
Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nasd | Corenet1 | Versions 1.2, 1.7, 1.8, 1.9, 1.10, 1.12 |
References
- NVD record
- CVE.org record
- http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
- http://www.securityfocus.com/archive/1/506419/100/0/threaded
- http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
- http://www.securityfocus.com/archive/1/506419/100/0/threaded