CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- mesadynamics stainlessInteger overflow in Stainless allows remote attackers to bypass intended port restrictions on...5.0 Medium
- omnigroup omniwebInteger overflow in OmniWeb allows remote attackers to bypass intended port restrictions on...5.0 Medium
- icabInteger overflow in Alexander Clauss iCab allows remote attackers to bypass intended port...5.0 Medium
- arora-browser aroraInteger overflow in Arora allows remote attackers to bypass intended port restrictions on...5.0 Medium
- apple safariInteger overflow in Apple Safari allows remote attackers to bypass intended port restrictions on...5.0 Medium
- mozilla firefoxInteger overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder...9.3 High
- postgresqlInteger overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5...3.5 Low
- apple safariInteger overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1,...9.3 High
- xnviewInteger overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code...9.3 High
- ibm lotus notes, symantec mail security, brightmail gateway +3 more +5 moreInteger overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as...10.0 High
- emc legato networker, ibm informix dynamic server +1 moreInteger signedness error in the authentication functionality in librpc.dll in the Informix...10.0 High
- luxology modoInteger overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted...9.3 High
- linux kernelThe selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12...7.8 High
- google chromeThe ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before...5.0 Medium
- google chromeMultiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote...9.3 High
- google chromeInteger overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src...9.3 High
- google chromeMultiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google...10.0 High
- google chromeMultiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome...9.3 High
- microsoft windows 2000, windows server 2003, windows xp +2 moreInteger overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2...9.3 High
- ffmpegArray index error in vorbis_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of...4.3 Medium
- ffmpegThe av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a...4.3 Medium
- ffmpegInteger overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and...4.3 Medium
- ffmpegMultiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and...10.0 High
- ffmpegvorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended,...10.0 High
- ffmpegoggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might...5.8 Medium
- ffmpegOff-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a...9.3 High
- netbsdInteger signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local...4.9 Medium
- systemtapMultiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in...4.9 Medium
- apache http serverThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a...4.3 Medium
- sun one web serverSun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP...4.3 Medium
- postgresqlThe bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8...6.5 Medium
- apache http serverInteger overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the...6.8 Medium
- ircd-hybrid, ircd-ratbox, oftc oftc-hybrid +2 moreInteger underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3...6.8 Medium
- adobe shockwave playerMultiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to...9.3 High
- gnu gzipInteger underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as...6.8 Medium
- google sketchupInteger overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of...9.3 High
- google sketchup, jan eric krprianidis lib3ds +1 moreArray index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1...9.3 High
- linux.thai libthaiMultiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to...10.0 High
- microsoft windows 2000, windows 7, windows server 2008 +3 more +5 moreInteger overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows...9.3 High
- adobe acrobat, acrobat reader +1 moreInteger overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x...10.0 High
- debian linux, linux kernel +1 moredrivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier...7.8 High
- mit kerberos, kerberos 5 +1 moreMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...10.0 High
- phpThe unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a...5.0 Medium
- pps.jussieu polipoThe httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other...5.0 Medium
- nullsoft winampMultiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote...9.3 High
- hp openview storage data protectorInteger overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager...10.0 High
- nullsoft winampInteger overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow...9.3 High
- mozilla firefox, seamonkey +1 moreInteger overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5...9.3 High
- linux kernelThe ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows...7.1 High
- adobe air, flash player +1 moreInteger overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10...9.3 High
- Show moreLoading…