Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-189

CWE-189: Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

adobe air, air sdk, flash player +2 moreInteger overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows...CVE-2013-0639EPSS 12.6%10.0 HighFebruary 12, 2013
wiresharkThe dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6...CVE-2013-1582Fix available2.9 LowFebruary 3, 2013
miniupnp project miniupnpdInteger signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP...CVE-2013-14627.8 HighJanuary 31, 2013
ge intelligent platforms proficy hmi\/scada cimplicity, intelligent platforms proficy process systems, intelligent platforms proficy process systems with cimplicity +2 moreInteger overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4...CVE-2012-46894.3 MediumJanuary 17, 2013
google chrome, opensuse +1 moreInteger overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a...CVE-2012-51547.5 HighJanuary 15, 2013
google chromeInteger overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial...CVE-2012-51516.8 MediumJanuary 15, 2013
google chrome, opensuse +1 moreInteger overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote...CVE-2012-51497.5 HighJanuary 15, 2013
adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x...CVE-2013-0613EPSS 10.0%10.0 HighJanuary 10, 2013
adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x...CVE-2013-060910.0 HighJanuary 10, 2013
microsoft xml core services, expression web, groove server +12 more +14 moreMicrosoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content,...CVE-2013-0006EPSS 28.1%9.3 HighJanuary 9, 2013
foswiki, twiki +1 moreThe localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x...CVE-2012-6330Public exploitEPSS 35.7%5.0 MediumJanuary 4, 2013
gnu grepMultiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to...CVE-2012-5667Public exploitFix available4.4 MediumJanuary 3, 2013
adobe air, air sdk, flash player +2 moreInteger overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows...CVE-2012-567710.0 HighDecember 12, 2012
wiresharkThe dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark...CVE-2012-6061Fix available5.0 MediumDecember 5, 2012
wiresharkInteger overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI...CVE-2012-6060Fix available5.0 MediumDecember 5, 2012
wiresharkInteger overflow in the dissect_icmpv6 function in epan/dissectors/packet-icmpv6.c in the ICMPv6...CVE-2012-6058Fix available5.0 MediumDecember 5, 2012
wiresharkThe dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector...CVE-2012-6057Fix available5.0 MediumDecember 5, 2012
wiresharkInteger overflow in the dissect_sack_chunk function in epan/dissectors/packet-sctp.c in the SCTP...CVE-2012-6056Fix available5.0 MediumDecember 5, 2012
wiresharkepan/dissectors/packet-3g-a11.c in the 3GPP2 A11 dissector in Wireshark 1.8.x before 1.8.4 allows...CVE-2012-6055Fix available5.0 MediumDecember 5, 2012
wiresharkThe dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow...CVE-2012-6054Fix available5.0 MediumDecember 5, 2012
wiresharkepan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x...CVE-2012-6053Fix available5.0 MediumDecember 5, 2012
libsshMultiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of...CVE-2012-4562Fix availableEPSS 12.8%7.5 HighNovember 30, 2012
google androidInteger overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka...CVE-2012-42216.8 MediumNovember 30, 2012
xenMultiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions...CVE-2012-6032Fix available4.9 MediumNovember 23, 2012
geglMultiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0...CVE-2012-4433Fix availableEPSS 13.3%7.5 HighNovember 18, 2012
ibm cognos business intelligenceIBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a...CVE-2012-48474.0 MediumNovember 14, 2012
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreInteger overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2012-1528EPSS 20.8%9.3 HighNovember 14, 2012
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreInteger underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2012-1527EPSS 20.8%9.3 HighNovember 14, 2012
redhat icedtea-web, opensuse +1 moreOff-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x...CVE-2012-4540Fix available6.8 MediumNovember 11, 2012
google chromeInteger overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial...CVE-2012-5127Fix available7.5 HighNovember 7, 2012
isc bindISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6...CVE-2012-5166Fix availableEPSS 32.7%7.8 HighOctober 10, 2012
microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreInteger overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...CVE-2012-25297.2 HighOctober 9, 2012
vwar virtual wararticle.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to cause a denial of...CVE-2010-52795.0 MediumOctober 8, 2012
novell groupwiseInteger overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3...CVE-2012-041710.0 HighSeptember 28, 2012
google chromeInteger overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X...CVE-2012-28967.5 HighSeptember 26, 2012
rsyslogInteger overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in...CVE-2011-4623Fix available2.1 LowSeptember 25, 2012
adobe flash playerInteger overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before...CVE-2012-5054In KEVEPSS 21.2%8.8 HighSeptember 24, 2012
novell groupwiseInteger overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in...CVE-2012-0271Public exploitEPSS 17.5%10.0 HighSeptember 19, 2012
color icclib, ghostscript, argyllcms cms +2 moreMultiple integer underflows in the icmLut_allocate function in International Color Consortium ...CVE-2012-4405Fix available6.8 MediumSeptember 18, 2012
realnetworks realplayer, realplayer sp +1 moreRealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer...CVE-2012-32347.5 HighSeptember 12, 2012
scott wheeler taglibInteger overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows...CVE-2012-1584Fix available4.3 MediumSeptember 6, 2012
gnu binutils, libiberty, canonical ubuntu linux +1 more +3 moreMultiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2)...CVE-2012-3509Fix available5.0 MediumSeptember 5, 2012
qemu, suse linux enterprise server +1 moreInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local...CVE-2014-0223Fix available4.6 MediumAugust 31, 2012
qemu, suse linux enterprise server +1 moreInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote...CVE-2014-0222Fix available7.5 HighAugust 31, 2012
mozilla firefox, seamonkey, thunderbird +1 more +3 moreInteger overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0,...CVE-2012-39699.3 HighAugust 29, 2012
ffmpegInteger overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1...CVE-2012-08494.3 MediumAugust 27, 2012
gnu glibcMultiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other...CVE-2012-3480Public exploitFix available4.6 MediumAugust 25, 2012
sgi performance co-pilotlibpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of...CVE-2012-3418Fix available5.0 MediumAugust 23, 2012
adobe air, air sdk, flash player +2 moreInteger overflow in Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows...CVE-2012-416710.0 HighAugust 21, 2012
ffmpeg, libav +1 moreInteger overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0...CVE-2011-43526.8 MediumAugust 20, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open