CVE-2009-3276 Denial of service in n/a
Attackers can cause denial of service via CPU exhaustion using a specific input string in the WinFormsAdvansed library.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-3276?
CVE-2009-3276 is a medium-severity denial of service vulnerability in n/a, published on 21 Sep 2009.
Official description
Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.
Which versions are affected by CVE-2009-3276?
It affects 1 product.
Products include Nasd Corenet1.
How do I fix CVE-2009-3276?
No fix has been published for CVE-2009-3276 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2009-3276 being exploited?
There is no known exploitation of CVE-2009-3276 in the wild and no public exploit code.
Sources
Also known as GHSA-2jjp-v4x9-55gm.