CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- silc, silc client, server +1 more +3 moreThe silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live...6.8 Medium
- orb networks orbInteger overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to...4.6 Medium
- freebsd, netbsd +1 moreMultiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and...7.5 High
- phpInteger overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of...5.0 Medium
- videolan vlcInteger overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote...6.8 Medium
- xine xine-libMultiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap...6.8 Medium
- xine xine-libArray index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1...6.8 Medium
- apple mac os x, mac os x server +1 moreOff-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context...4.3 Medium
- apple mac os x, mac os x server +1 moreMultiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X...6.8 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute...6.9 Medium
- perforce serverThe Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote...7.8 High
- perforce serverThe Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote...5.0 Medium
- sap maxdbInteger signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows...9.3 High
- siemens speedstream 6520The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web...7.8 High
- google android sdkInteger overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK...7.5 High
- ipswitch instant messagingIpswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of...5.0 Medium
- extremez print server, extremez-ip file server +1 moreExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a...5.0 Medium
- adobe connect enterprise server, flash media server 2 +1 moreMultiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and...10.0 High
- adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute...9.3 High
- clam anti-virus clamavInteger overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in...10.0 High
- gnome gnumericThe excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1...9.3 High
- mplayer, xine xine-lib +1 moreArray index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917,...7.5 High
- mplayerArray index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote...9.3 High
- radio toolbox steamcastOff-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of...10.0 High
- radio toolbox steamcastInteger overflow in the OggHeaderParse function in Steamcast 0.9.75 and earlier allows remote...5.0 Medium
- radio toolbox steamcastSteamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash)...5.0 Medium
- firebirdsql firebirdInteger overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2...7.8 High
- gecad technologies axigen mail serverFormat string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote...9.3 High
- x.org evi, mit-shm, xserver +2 moreMultiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to...9.3 High
- isc bindOff-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used...10.0 High
- postgresql, tcl tk tk +1 moreAlgorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as...6.8 Medium
- postgresql, tcl tk tk +1 moreThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1...6.8 Medium
- fengInteger overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and...7.5 High
- opera browserAlgorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote...7.8 High
- libexifInteger overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute...6.8 Medium
- linux kernelInteger overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6...7.2 High
- easy software products cupsInteger underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS...9.3 High
- aertherwide exiftagsInteger overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a ...10.0 High
- apple mac os xThe cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in...4.9 Medium
- clam anti-virus clamavOff-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a...6.8 Medium
- clam anti-virus clamavInteger overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary...7.5 High
- microsoft internet explorer, ie +1 moreUse-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet...9.3 High
- apple mac os x, mac os x server +1 moreThe accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10...7.8 High
- ext2 filesystems utilities e2fsprogsMultiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote...5.8 Medium
- intel pro wireless 3945abg, wireless wifi link 4965agn +1 moreThe iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences...5.0 Medium
- apple mac os xInteger overflow in the load_threadstack function in the Mach-O loader (mach_loader.c) in the xnu...4.9 Medium
- mit kerberos 5Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT...10.0 High
- microsoft windows media playerMicrosoft Windows Media Player (WMP) allows remote attackers to cause a denial of service ...5.0 Medium
- typespeedtypespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- redhat cairoMultiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute...6.8 Medium
- Show moreLoading…