What’s Vulnerable › Vulnerabilities

CVE-2009-3276

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-09-21 · updated 2026-06-16

Description

Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.

Affected products

• Nasd Corenet1: 1.2, 1.7, 1.8, 1.9, 1.10, 1.12 (+25)

References

• http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
• http://www.securityfocus.com/archive/1/506419/100/0/threaded
• http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
• http://www.securityfocus.com/archive/1/506419/100/0/threaded

Get alerted when CVE-2009-3276 or the next vulnerability affects your stack