CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- secretwars soldner secret warsSoldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service (CPU...7.8 High
- ruby-lang rubyInteger overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows...7.5 High
- microsoft data engine, sql server, wmsde +3 more +5 moreInteger underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE...9.0 High
- simple machines forumSimple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP...7.5 High
- adium, pidgin +1 moreMultiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler...6.8 Medium
- videolan vlc media playerInteger overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on...9.3 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...7.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey...9.3 High
- nasm netwide assemblerOff-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows...6.8 Medium
- sun opensolaris, solaris, sunos +2 moreInteger signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts...7.2 High
- freetypeMultiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute...7.5 High
- freetypeFreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid...7.5 High
- freetypeInteger overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute...7.5 High
- exiv2Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and...4.3 Medium
- lavrsen motionOff-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might...10.0 High
- x x11Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow...10.0 High
- xorg x11Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1...6.8 Medium
- x x11Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X...9.0 High
- x x11Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X...6.8 Medium
- x x11The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record...9.0 High
- openoffice openoffice.orgInteger overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in...9.3 High
- linux kernelInteger overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion...7.2 High
- opensuseMultiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and...10.0 High
- damian frizza borland interbaseInteger overflow in Borland Interbase 2007 SP2 (8.1.0.256) allows remote attackers to execute...7.5 High
- apple mac os xInteger underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute...9.3 High
- opensslDouble free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are...4.3 Medium
- gnu gnutlsInteger signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in...5.0 Medium
- gnu gnutlsThe _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv...10.0 High
- xiph.org libvorbisInteger overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and...9.3 High
- xiph.org libvorbisInteger overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0...6.8 Medium
- rdesktopInteger signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote...9.3 High
- rdesktopInteger underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers...9.3 High
- phpThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...7.5 High
- broadcom brightstor arcserve backupThe Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote...5.0 Medium
- realtek hd audio codec driversInteger overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1...6.8 Medium
- sun openoffice.orgInteger underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of...6.8 Medium
- openoffice openoffice.orgInteger overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of...6.8 Medium
- hp openview network node managerInteger signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7...10.0 High
- fireflymediaserverInteger overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4...7.5 High
- libpnglibpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows...7.5 High
- kernel linux kernelInteger overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when...4.9 Medium
- adobe flash playerInteger overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows...9.3 High
- ibm soliddbUncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a...4.3 Medium
- xine xine-lib, xiph libfishsound, speex +2 moreArray index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier,...9.3 High
- interwoven worksite webDouble free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite...9.3 High
- gnu gcc** DISPUTED ** gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used,...6.8 Medium
- powerdns recursorPowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2)...6.8 Medium
- mplayerUncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1...10.0 High
- Show moreLoading…