CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- swftoolsMultiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via...9.3 High
- sap crystal reportsInteger overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module...10.0 High
- autonomy keyview export sdk, keyview filter sdk, keyview viewer sdk +2 moreInteger underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10...9.3 High
- autonomy keyview export sdk, keyview filter sdk, keyview viewer sdk +2 moreInteger signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM,...9.3 High
- mozilla bugzillaBugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2,...4.0 Medium
- glpngMultiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute...6.8 Medium
- wiresharkThe SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and...10.0 High
- microsoft windows 7, windows server 2008, windows vista +2 moreInteger overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and...6.8 Medium
- adobe acrobat, acrobat reader +1 moreInteger overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows...9.3 High
- cabextract project cabextractInteger signedness error in the Quantum decompressor in cabextract before 1.3, when archive test...5.1 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreInteger overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,...9.3 High
- apple safari, webkit +1 moreInteger signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and...9.3 High
- mozilla firefox, seamonkey +1 moreInteger overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey...9.3 High
- digia qt, webkit +1 moreOff-by-one error in the WebSocketHandshake::readServerHandshake function in websockets...7.5 High
- adobe acrobat, acrobat reader +1 moreArray index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8...9.3 High
- novell imanagerOff-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a...5.0 Medium
- libtiffInteger overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to...6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreInteger overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreInteger overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x...9.3 High
- apple mac os x, mac os x server +1 moreMultiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in...6.8 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4...7.5 High
- adobe air, flash player +1 moreInteger overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR...9.3 High
- adobe air, flash player +1 moreInteger overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR...9.3 High
- adobe air, flash player +1 moreInteger overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR...9.3 High
- standards based linux instrumentation sblim-sfcbInteger overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the...10.0 High
- apple safari, webkit +1 moreWebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on...4.3 Medium
- isc dhcpISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of...5.0 Medium
- gnu glibcInteger signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in...5.1 Medium
- gnu glibcInteger overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation...5.0 Medium
- gnu glibcMultiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6...5.0 Medium
- freebsd, nrl opie +1 moreOff-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and...9.3 High
- daniel mealha cabrita ziproxyMultiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to...6.8 Medium
- clamavOff-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote...4.3 Medium
- apple java 1.5, java 1.6 +1 moreInteger signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5...6.8 Medium
- microsoft windows 7, windows server 2008 +1 moreInteger overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server...9.3 High
- gnustep baseInteger overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1...7.2 High
- microsoft outlook express, windows live mail, windows mail +2 moreInteger overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live...9.3 High
- videolan vlc media playerInteger underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp...7.5 High
- tug tetex, tex live +1 moreMultiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX...6.8 Medium
- tug tetex, tex live +1 moreInteger overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to...6.8 Medium
- mega-nerd libsndfileThe (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6)...4.3 Medium
- x x.orgThe fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1...7.1 High
- realnetworks helix mobile server, helix server, helix server mobile +2 moreInteger overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in...10.0 High
- perlInteger overflow in the regular expression engine in Perl 5.8.x allows context-dependent...5.0 Medium
- tug tetex, tex live +1 moreInteger overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2)...6.8 Medium
- opera browserInteger overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code...10.0 High
- linux kernelThe azx_position_ok function in hda_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running...7.1 High
- apple quicktimeInteger overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute...9.3 High
- apple mac os x, mac os x server +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute...6.8 Medium
- apple safariSafari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of...9.3 High
- Show moreLoading…