CVEvulnerability

CVE-2009-3276

5.0 MEDIUM Published 2009-09-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-09-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.

Affected configurations

• nasd corenet1 1.2 • nasd corenet1 1.7 • nasd corenet1 1.8 • nasd corenet1 1.9 • nasd corenet1 1.10 • nasd corenet1 1.12 • nasd corenet1 1.13 • nasd corenet1 1.15 • nasd corenet1 1.17 • nasd corenet1 1.18 • nasd corenet1 1.19 • nasd corenet1 1.24 • nasd corenet1 2.7 • nasd corenet1 2.8 • nasd corenet1 2.9 • nasd corenet1 2.11 • nasd corenet1 2.12 • nasd corenet1 2.13 • nasd corenet1 2.14 • nasd corenet1 2.15 • nasd corenet1 2.16 • nasd corenet1 2.17 • nasd corenet1 2.18 • nasd corenet1 2.19 • nasd corenet1 3.2 • nasd corenet1 3.11 • nasd corenet1 3.12 • nasd corenet1 3.13 • nasd corenet1 3.14 • nasd corenet1 3.15 • nasd corenet1 3.16

References