CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, suite, seamonkey +1 more +3 moreInteger overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8,...9.3 High
- mozilla firefox, suite, seamonkey +1 more +3 moreInteger overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8,...9.3 High
- apple imageio, mac os x, safari +1 more +3 moreInteger overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause...5.0 Medium
- linux kernelInteger overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using ...6.9 Medium
- apple itunes, quicktime +1 moreInteger overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows...6.8 Medium
- microsoft windows 2000, windows 2003 server, windows 98 +3 more +5 moreAn unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on...9.3 High
- net-snmpsnmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2...10.0 High
- apple quicktimeInteger overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary...7.5 High
- apple quicktimeInteger overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary...7.5 High
- apple quicktimeInteger underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of...7.5 High
- daniel stenberg curlMultiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users...4.6 Medium
- perlInteger overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6...4.6 Medium
- apple quicktimeInteger overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute...5.1 Medium
- apple quicktimeInteger overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute...5.1 Medium
- skype technologies skypeInteger overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1...10.0 High
- xfree86 project xfree86Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute...5.1 Medium
- centericq, ekg, kadu +1 more +3 moreMultiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3...7.5 High
- gnu gdbInteger overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils,...4.6 Medium
- ethereal group etherealThe IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain...5.0 Medium
- easy software products cups, kde kpdf, libextractor +24 more +26 moreThe CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler...5.0 Medium
- linux kernelMultiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux...4.4 Medium
- epic games unreal engine, unreal tournament 2003 +1 moreEpic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service ...10.0 High
- nessusSigned integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin...4.6 Medium
- dctc project dctcDirect connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of...7.8 High
- socks5Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a...7.8 High
- apt-www-proxyThe parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial...5.0 Medium
- netbsd ftpdftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT...5.0 Medium
- jelsoft vbulletinmember2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be...5.0 Medium