CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- asterisk zaptelArray index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11...7.2 High
- sun jdk, jre, sdk +2 moreInteger overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier;...9.3 High
- sun jdk, jre +1 moreInteger overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in...9.3 High
- littlecms lcms, little cms color engine +1 moreInteger signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color...10.0 High
- videolan vlc media playerInteger overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN...9.3 High
- apple cupsInteger overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote...7.5 High
- iea software air marshal, emerald, radius test client +3 more +5 moreThe web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44,...10.0 High
- xine xine-libThe real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15...4.3 Medium
- xine xine-libInteger underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows...4.3 Medium
- xineInteger overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other...7.1 High
- xineMultiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow...10.0 High
- clientsoftware wincome mpd totalInteger overflow in the remote administration protocol processing in Client Software WinCom LPD...10.0 High
- xmlsoft libxmlInteger overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent...7.8 High
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreInteger overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0...10.0 High
- pythonMultiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent...10.0 High
- netpbmpamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which...4.3 Medium
- videolan vlc media playerMultiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC...9.3 High
- microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreInteger overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2,...7.2 High
- novell edirectoryMultiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8...10.0 High
- apple cupsInteger overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote...6.8 Medium
- apple iphone os, mac os x, mac os x server +2 moreInteger signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple...10.0 High
- jasper project jasperMultiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an...9.3 High
- microsoft windows xpgdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files,...4.3 Medium
- mplayerMultiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier...9.3 High
- microsoft internet authentication service helper com componentA certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreInteger overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...10.0 High
- avantbrowser avant browserInteger overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote...4.3 Medium
- phpThe (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong...5.1 Medium
- joomlaJoomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for...7.5 High
- apple iphone, ipod touch, safari +2 moreOff-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in...5.0 Medium
- apple mac os x, mac os x server +1 moreMultiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4...10.0 High
- apple itunesInteger overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP,...7.2 High
- apple quicktimeInteger overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute...6.8 Medium
- microsoft digital image suite, forefront client security, office +6 more +8 moreInteger overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007...9.3 High
- freebsd, kame, netbsd +2 moreThe mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME,...7.1 High
- microsoft digital image suite, forefront client security, internet explorer +13 more +15 moreInteger overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server...9.3 High
- hsc dns2tcpdns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the...10.0 High
- linux kernelInteger overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream...7.8 High
- videolan vlc media playerInteger signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC...6.8 Medium
- videolan vlc media playerInteger overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows...9.3 High
- linux kernelInteger overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram...7.1 High
- php-nuke, pligg +1 moreThe CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1...5.0 Medium
- apple coregraphicsInteger overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote...9.3 High
- ca arcserve backup for laptops and desktops, broadcom brightstor arcserve backup, desktop management suite +1 more +3 moreInteger underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for...10.0 High
- pythonInteger overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow...7.5 High
- grisoft avg antivirusThe files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to...5.0 Medium
- eps probe builder, hp openview internet services +1 moreThe Probe Builder Service (aka PBOVISServer.exe) in European Performance Systems (EPS) Probe...7.8 High
- powerdns recursorPowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for...6.8 Medium
- novell edirectoryInteger overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3...10.0 High
- apple safariInteger signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows...10.0 High
- Show moreLoading…