Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-189

CWE-189: Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

realnetworks realplayerInteger underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute...CVE-2011-42599.3 HighNovember 24, 2011
clamavThe bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service ...CVE-2011-3627Fix available4.3 MediumNovember 17, 2011
microsoft windows 7, windows server 2008, windows vista +2 moreInteger overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008...CVE-2011-2013Public exploitEPSS 32.3%10.0 HighNovember 8, 2011
apache http serverInteger overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x...CVE-2011-3607Public exploitFix available4.4 MediumNovember 8, 2011
moodlemessage/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a...CVE-2011-43054.0 MediumNovember 7, 2011
apple quicktimeInteger overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary...CVE-2011-32509.3 HighOctober 28, 2011
apple quicktimeInteger signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute...CVE-2011-32489.3 HighOctober 28, 2011
apple quicktimeInteger overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute...CVE-2011-32479.3 HighOctober 28, 2011
openldapOff-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote...CVE-2011-4079Fix available4.0 MediumOctober 27, 2011
linux kernelThe div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26...CVE-2011-3209Fix available4.9 MediumOctober 21, 2011
apple mac os x, mac os x server +1 moreInteger signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows...CVE-2011-34376.8 MediumOctober 14, 2011
novell groupwiseInteger signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3...CVE-2011-266210.0 HighOctober 8, 2011
ffmpegInteger signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in...CVE-2011-3974Fix available5.0 MediumOctober 2, 2011
ffmpeg, libav +1 moreInteger signedness error in the decode_residual_block function in cavsdec.c in libavcodec in...CVE-2011-3362Fix available6.8 MediumOctober 2, 2011
mozilla firefoxInteger underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a...CVE-2011-299810.0 HighSeptember 29, 2011
linux kernelInteger signedness error in the osf_sysinfo function in arch/alpha/kernel/osf_sys.c in the Linux...CVE-2011-22092.1 LowSeptember 22, 2011
linux kernelInteger signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the...CVE-2011-22082.1 LowSeptember 22, 2011
cogentdatahub cogent datahubInteger overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial...CVE-2011-3501Public exploit5.0 MediumSeptember 16, 2011
openttdMultiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to...CVE-2011-3341Fix available7.5 HighSeptember 8, 2011
linux kernelInteger overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39...CVE-2011-24964.9 MediumSeptember 8, 2011
systemtapSystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a...CVE-2011-1781Fix available1.2 LowAugust 29, 2011
systemtapSystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to...CVE-2011-1769Fix available1.2 LowAugust 29, 2011
wiresharkOff-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI...CVE-2011-2698Fix available4.3 MediumAugust 23, 2011
symantec netbackup puredisk, veritas dynamic multi-pathing, veritas storage foundation +1 more +3 moreMultiple integer overflows in vxsvc.exe in the Veritas Enterprise Administrator service in...CVE-2011-054710.0 HighAugust 19, 2011
apple quicktimeInteger signedness error in Apple QuickTime before 7.7 allows remote attackers to execute...CVE-2011-0257Public exploitEPSS 60.1%9.3 HighAugust 15, 2011
apple quicktimeInteger overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code...CVE-2011-02569.3 HighAugust 15, 2011
citrix xenMultiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1...CVE-2011-1583Fix available6.9 MediumAugust 12, 2011
adobe air, flash player +1 moreInteger overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris...CVE-2011-241610.0 HighAugust 10, 2011
adobe air, flash player +1 moreInteger overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris...CVE-2011-213810.0 HighAugust 10, 2011
adobe air, flash player +1 moreInteger overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris...CVE-2011-213610.0 HighAugust 10, 2011
clamavOff-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97...CVE-2011-2721Fix available5.0 MediumAugust 5, 2011
apple safariOff-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute...CVE-2011-0216Fix available9.3 HighJuly 21, 2011
nrl opieMultiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow...CVE-2011-24897.2 HighJuly 21, 2011
freetype, apple iphone os +1 moreInteger signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in...CVE-2011-0226Fix available9.3 HighJuly 19, 2011
redhat libvirtInteger overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of...CVE-2011-2511Fix available4.0 MediumJuly 19, 2011
microsoft windows server 2003, windows xp, windows 2003 server +2 moreInteger overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in...CVE-2011-18707.2 HighJuly 13, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in...CVE-2011-12847.2 HighJuly 13, 2011
apache xml security for c\+\+, shibboleth shibboleth-sp +1 moreOff-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in...CVE-2011-2516Fix available5.0 MediumJuly 10, 2011
mozilla firefox, seamonkey, thunderbird +2 moreInteger overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through...CVE-2011-2371Public exploitEPSS 75.7%10.0 HighJune 30, 2011
foxitsoftware foxit readerInteger overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0...CVE-2011-19089.3 HighJune 24, 2011
apple mac os x, mac os x server +1 moreInteger overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to...CVE-2011-02026.8 MediumJune 24, 2011
apple mac os x, mac os x server +1 moreOff-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context...CVE-2011-02017.5 HighJune 24, 2011
apple mac os x, mac os x server +1 moreInteger overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute...CVE-2011-02006.8 MediumJune 24, 2011
adobe shockwave playerInteger overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0...CVE-2011-21239.3 HighJune 16, 2011
adobe shockwave playerInteger overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute...CVE-2011-21219.3 HighJune 16, 2011
adobe shockwave playerInteger overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626...CVE-2011-21209.3 HighJune 16, 2011
adobe shockwave playerMultiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow...CVE-2011-21099.3 HighJune 16, 2011
microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreInteger underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft...CVE-2011-0658EPSS 21.2%9.3 HighJune 16, 2011
videolan vlc media playerInteger overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9...CVE-2011-2194Public exploitFix available9.3 HighJune 10, 2011
google android, android os +1 moreThe vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are...CVE-2011-1823In KEVEPSS 41.4%7.8 HighJune 9, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open