CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- muscle pcsc-liteSignedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID)...4.4 Medium
- torTor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a...5.0 Medium
- mysqlMySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial...4.0 Medium
- microsoft data access components, windows data access components +1 moreInteger signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft...9.3 High
- phpstrtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...5.0 Medium
- linux kernelInteger overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35...4.9 Medium
- redhat evinceInteger overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier...7.6 High
- videolan vlc media playerMultiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player...9.3 High
- microsoft office, office converter pack +1 moreInteger overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3,...9.3 High
- realnetworks realplayer, realplayer sp +1 moreInteger overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1,...9.3 High
- realnetworks realplayer, realplayer sp +1 moreInteger overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4,...9.3 High
- realnetworks realplayer, realplayer sp +1 moreInteger overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1,...9.3 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not...9.3 High
- mozilla firefox, seamonkey +1 moreInteger overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6...9.3 High
- apple quicktimeInteger overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary...9.3 High
- apple quicktimeInteger signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute...9.3 High
- ca internet security suite plus 2010Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local...7.2 High
- clamavOff-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5...7.5 High
- phpInteger overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3...5.0 Medium
- nullsoft winampInteger overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an...9.3 High
- nullsoft winampMultiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to...9.3 High
- nullsoft winampMultiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote...9.3 High
- apple safari, webkit +1 moreInteger overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari...9.3 High
- apple safari, webkit +1 moreInteger underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and...9.3 High
- apple safari, webkit +1 moreInteger overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows...9.3 High
- apache mod fcgid, fedora, red hat enterprise linux 7 +2 more +4 moreHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c7.5 High
- apple mac os x, mac os x server +1 moreInteger signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote...6.8 Medium
- apple mac os x, quicktime, mac os x server +2 moreInteger signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote...6.8 Medium
- phpInteger overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it...6.8 Medium
- microsoft office, powerpoint, powerpoint viewer +2 moreInteger underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and...9.3 High
- ibm informix dynamic serverInteger overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20...10.0 High
- ibm soliddbsolid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a...5.0 Medium
- microsoft excelInteger overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3,...9.3 High
- freetypeInteger overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4...9.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreMultiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5...1.9 Low
- apple mac os x, freebsd, netbsd +2 moreMultiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0...4.9 Medium
- bzip bzip2, libzip2 +1 moreInteger overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0...5.1 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreInteger overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6...9.3 High
- realnetworks realplayer, realplayer sp +1 moreMultiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through...9.3 High
- realnetworks realplayer, realplayer sp +1 moreInteger overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4...9.3 High
- adobe shockwave playerMultiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player...9.3 High
- adobe shockwave playerInteger signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to...9.3 High
- adobe shockwave playerInteger overflow in the 3D object functionality in Adobe Shockwave Player before 11.5.8.612...9.3 High
- adobe shockwave playerInteger signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows...9.3 High
- artifex afpl ghostscript, ghostscript fonts, gpl ghostscript +2 moreOff-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript...9.3 High
- openoffice openoffice.orgInteger overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before...9.3 High
- openoffice openoffice.orgsimpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not...9.3 High
- mono-project libgdiplusMultiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute...6.8 Medium
- linux kernelInteger overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel...4.7 Medium
- Show moreLoading…