CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- symantec backupexec system recoveryMultiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for...7.8 High
- apple quicktimeAn "integer arithmetic" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary...6.8 Medium
- wiresharkInteger signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6...4.3 Medium
- pcrePerl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the...4.3 Medium
- apple mac os x, mac os x server +1 moreInteger signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac...7.2 High
- apple mac os x, mac os x server +1 moreInteger overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local...7.2 High
- pcreInteger overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow...6.8 Medium
- pcreInteger overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context...6.8 Medium
- linux kernelInteger underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux...7.1 High
- ibm aixInteger underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2)...7.2 High
- pcreMultiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow...7.5 High
- cupsOff-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to...10.0 High
- mcafee e-business serverInteger overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux...9.3 High
- realnetworks realone player, realplayer, realplayer enterprise +2 moreInteger overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer...9.3 High
- amxmodx amx mod x, valve software half-life dedicated server +1 moreOff-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might...7.5 High
- lg electronics mobile handsetInteger overflow in the LG Mobile handset allows remote attackers to cause a denial of service ...7.8 High
- cisco iosInteger overflow in Cisco IOS allows remote attackers to execute arbitrary code via unspecified...9.3 High
- extremailInteger overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of...10.0 High
- opensslOff-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote...9.3 High
- drupalDrupal 5.2 and earlier does not properly unset variables when the input data includes a numeric...6.8 Medium
- flac libflac, nullsoft winamp +1 moreMultiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in...9.3 High
- massive entertainment world in conflictThe GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier...5.0 Medium
- wzdftpdOff-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2...5.0 Medium
- libpngOff-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng...4.3 Medium
- libpngOff-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng...4.3 Medium
- americasarmy america\'s army, america\'s army special forces +1 moreThe Windows dedicated server for the Unreal engine, as used by America's Army and America's Army...4.3 Medium
- x.org x font serverThe swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent...7.5 High
- x.org x font serverInteger overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows...6.8 Medium
- sun sunosInteger signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows...4.9 Medium
- broadcom brightstor arcserve backup laptops desktops, desktop management suite, ca protection suites +2 moreInteger overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops...9.3 High
- opensslOff-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8...6.8 Medium
- 3ware 3dm disk management software, microsoft windows 2003 server, windows server 2003 +2 more +4 moreMicrosoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial...7.1 High
- imagemagickOff-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows...9.3 High
- imagemagickMultiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to...6.8 Medium
- dibblerMultiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service ...5.0 Medium
- dibblerDibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes,...5.0 Medium
- vmware ace, player, server +1 more +3 moreInteger overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server...10.0 High
- gcaldaemonThe readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13...4.3 Medium
- guliverkli media player classic, mympc cd-storm, verycd stormplayer +2 moreMultiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone...9.3 High
- redhat enterprise linux** DISPUTED ** The ipv6_getsockopt_sticky function in the kernel in Red Hat Enterprise Linux ...1.9 Low
- realnetworks helix player, realplayer +1 moreRealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6...4.3 Medium
- php, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers...7.5 High
- phpMultiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...6.8 Medium
- sophos anti-virus, scanning engine, small business suite +2 moreSophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a...6.8 Medium
- trend micro serverprotectInteger overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect...10.0 High
- trend micro serverprotectMultiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect...10.0 High
- microsoft windows 2000, windows 2003 server, windows server 2003 +1 more +3 moreInteger overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft...9.3 High
- microsoft office, visual basic +1 moreObject linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2,...9.3 High
- adobe flash playerInteger overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to...9.3 High
- linux kernelThe decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2...7.8 High
- Show moreLoading…