Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-189

CWE-189: Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

google chrome, apple iphone os +1 moreOff-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products,...CVE-2011-3102Fix available6.8 MediumMay 16, 2012
opensslInteger underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when...CVE-2012-2333Fix availableEPSS 27.9%6.8 MediumMay 14, 2012
apple mac os x, mac os x server +1 moreInteger overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote...CVE-2012-06627.5 HighMay 11, 2012
apple mac os x, mac os x server +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute...CVE-2012-06596.8 MediumMay 11, 2012
xnviewInteger overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute...CVE-2012-06859.3 HighMay 9, 2012
xnviewInteger overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute...CVE-2012-06849.3 HighMay 9, 2012
cisco 5500 series adaptive security appliance, adaptive security appliance software +1 moreCisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow...CVE-2012-03787.8 HighMay 3, 2012
freetype, mozilla firefox mobile +1 moreFreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows...CVE-2012-1143Fix available4.3 MediumApril 25, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR...CVE-2012-04735.0 MediumApril 25, 2012
linux kernel, canonical ubuntu linux +1 morearch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when...CVE-2014-4508Fix available4.7 MediumApril 24, 2012
linux kernelThe lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel...CVE-2013-6378Fix available4.4 MediumApril 24, 2012
linux kernelThe apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel...CVE-2013-6367Fix available5.7 MediumApril 24, 2012
linux kernelMultiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12...CVE-2013-4511Fix available6.9 MediumApril 24, 2012
linux kernelThe ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly...CVE-2013-4483Fix available4.9 MediumApril 24, 2012
linux kernel, fedoraproject fedora, redhat enterprise linux +1 more +3 moreOff-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel...CVE-2013-4345Fix available5.8 MediumApril 24, 2012
linux kernelThe tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when...CVE-2012-4565Fix available4.7 MediumApril 24, 2012
linux kernel, canonical ubuntu linux +1 moreThe sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote...CVE-2012-3412Fix available7.8 HighApril 24, 2012
opensslMultiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote...CVE-2012-2131Public exploitFix availableEPSS 16.8%7.5 HighApril 24, 2012
emc data protection advisorInteger overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5...CVE-2012-0407Public exploit5.0 MediumApril 20, 2012
linux kernelThe ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86...CVE-2012-2100Fix available7.1 HighApril 12, 2012
adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows...CVE-2012-0774EPSS 15.5%10.0 HighApril 10, 2012
sambaThe RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4...CVE-2012-1182Public exploitFix availableEPSS 74.4%10.0 HighApril 10, 2012
openbsd opensshThe ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...CVE-2011-5000Fix available3.5 LowApril 4, 2012
libtiffMultiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute...CVE-2012-1173Fix available6.8 MediumApril 4, 2012
arcinfo frontvue, pcvue, plantvue +2 moreInteger overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0...CVE-2011-4043Public exploit9.3 HighApril 3, 2012
gnu gnutls, libtasn1 +1 moreThe asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS...CVE-2012-1569Fix available5.0 MediumMarch 24, 2012
ibm db2Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM...CVE-2012-07117.5 HighMarch 20, 2012
gnu gnashInteger overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10...CVE-2012-11756.8 MediumMarch 19, 2012
apple iphone osInteger underflow in Apple iOS before 5.1 allows remote attackers to execute arbitrary code or...CVE-2012-06429.3 HighMarch 8, 2012
adobe flash player, flash player for android +1 moreAdobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux,...CVE-2012-07695.0 MediumMarch 5, 2012
konstanty bialkowski libmodplugOff-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0...CVE-2011-2915Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugOff-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8...CVE-2011-2914Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugOff-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8...CVE-2011-2913Fix available6.8 MediumFebruary 21, 2012
konstanty bialkowski libmodplugInteger overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8...CVE-2011-2911Fix available6.8 MediumFebruary 21, 2012
hancom office 2010 seMultiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute...CVE-2012-12069.3 HighFebruary 20, 2012
acd systems acdseeInteger overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers...CVE-2012-11979.3 HighFebruary 18, 2012
opera browserMultiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of...CVE-2012-10035.0 MediumFebruary 7, 2012
apple mac os x, mac os x server +1 moreOff-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute...CVE-2011-34596.8 MediumFebruary 2, 2012
apple mac os x, mac os x server +1 moreInteger overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute...CVE-2011-34537.5 HighFebruary 2, 2012
renren talkInteger signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via...CVE-2012-09159.3 HighJanuary 24, 2012
ibm lotus symphonyMultiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony...CVE-2012-01929.3 HighJanuary 23, 2012
yahoo messengerInteger overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0...CVE-2012-02685.1 MediumJanuary 19, 2012
apache tomcatDenial of Service in Apache TomcatCVE-2012-0022Fix availableEPSS 10.5%5.0 MediumJanuary 19, 2012
linux kernelInteger overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the...CVE-2011-46114.9 MediumJanuary 15, 2012
dan kogai encode module, perl +1 moreOff-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44...CVE-2011-2939Fix available5.1 MediumJanuary 13, 2012
novell xtier frameworkMultiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote...CVE-2011-17107.5 HighDecember 31, 2011
3ssoftware codesysInteger overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote...CVE-2011-50087.5 HighDecember 25, 2011
nullsoft winampMultiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers...CVE-2011-38349.3 HighDecember 16, 2011
gnome evince, t1lib, tetex +2 moreMultiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib...CVE-2011-5244Fix available6.8 MediumDecember 3, 2011
php, canonical ubuntu linux, debian linux +2 moreInteger overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4...CVE-2011-45666.4 MediumNovember 29, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open