CVE-2009-3276: Nasd CORENET1

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.

Affected products

• Nasd CORENET1: version 1.2 only; version 1.7 only; version 1.8 only; version 1.9 only; version 1.10 only; version 1.12 only; …

Published 2009-09-21. Last modified 2026-06-16.