CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- wiresharkInteger underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2...4.3 Medium
- xmlsoft libxml, libxml2 +1 moreInteger overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1...9.3 High
- hp intelligent management centerInteger overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to...10.0 High
- ibm lotus notesInteger underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3,...9.3 High
- adobe flash playerInteger overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and...9.3 High
- isc bindOff-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before...5.0 Medium
- openbsdMultiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow...5.0 Medium
- linux kernelInteger overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the...6.2 Medium
- linux kernelInteger underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on...4.0 Medium
- adobe flash playerInteger overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and...9.3 High
- linux kernel, redhat enterprise linux, enterprise linux aus +4 more +6 moreMultiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory...6.9 Medium
- libtiffInteger overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5...4.3 Medium
- linux kernelInteger overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the...6.9 Medium
- banu tinyproxyInteger overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass...6.8 Medium
- wiresharkThe NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses...4.3 Medium
- google chrome, mozilla firefox +1 moreThe Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the...10.0 High
- microsoft jscript, vbscript +1 moreMultiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6...9.3 High
- microsoft excel, excel viewer, office +2 more +4 moreInteger signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004...9.3 High
- microsoft excel, excel viewer, office +2 more +4 moreInteger underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008...9.3 High
- microsoft office, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003...9.3 High
- gnu glibcInteger overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier...5.0 Medium
- realflex realwinMultiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10)...10.0 High
- foolabs xpdf, t1lib, glyphandcog xpdfreader +2 moreOff-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other...4.3 Medium
- apple imageio, mac os x, mac os x server +2 moreInteger overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to...6.8 Medium
- ruby-lang rubyThe VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier,...6.8 Medium
- apple mac os x, mac os x server +1 moreLibinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in...5.0 Medium
- apple imageio, mac os x, mac os x server +2 moreInteger overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute...6.8 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1)...2.1 Low
- apple mac os x, mac os x server +1 moreAirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service...4.9 Medium
- phpInteger signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context...4.3 Medium
- phpInteger overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows...5.0 Medium
- phpInteger overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to...7.5 High
- apple webkit, rim blackberry torch 9800, blackberry torch 9800 firmware +2 moreInteger overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with...10.0 High
- apple mac os x, iphone os, mac os x server +2 moreInteger overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple...6.8 Medium
- proftpdInteger overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote...5.0 Medium
- wiresharkOff-by-one error in the dissect_6lowpan_iphc function in packet-6lowpan.c in Wireshark 1.4.0...4.3 Medium
- foxitsoftware foxit phantom, foxit reader +1 moreInteger overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows...9.3 High
- hex-rays idaInteger overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown...10.0 High
- hex-rays idaInteger overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has...10.0 High
- ca etrust secure content manager, gateway security +1 moreThe eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8...10.0 High
- adobe acrobat, acrobat reader +1 moreInteger overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and...9.3 High
- adobe flash playerInteger overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary...9.3 High
- adobe shockwave playerInteger overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute...9.3 High
- adobe shockwave playerInteger overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows...9.3 High
- ibm lotus dominoInteger signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus...10.0 High
- phpInteger overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context...5.0 Medium
- postgresqlBuffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array...6.5 Medium
- novell groupwiseInteger signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise...10.0 High
- ffmpegInteger overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the...9.3 High
- phpThe iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not...5.0 Medium
- Show moreLoading…