Lucene search
+L

1329 matches found

Prion
Prion
•added 2014/11/04 9:55 p.m.•24 views

Integer overflow

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS7.9AI score0.04944EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2014/11/04 9:00 p.m.•39 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

8.7AI score0.04944EPSS
SaveExploits0References5
CVE
CVE
•added 2014/11/04 9:00 p.m.•117 views

CVE-2013-4148

The CVE-2013-4148 entry applies to QEMU 1.x prior to 1.7.2, where an integer signedness error in hw/net/virtio-net.c (virtio_net_load) can trigger a buffer overflow when loading a crafted savevm image. This enables remote code execution with the privileges of the QEMU process, via a state-load/mi...

7.5CVSS8.6AI score0.04944EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2014/11/04 9:00 p.m.•3 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS0.04944EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2014/11/04 9:00 p.m.•36 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS8.7AI score0.04944EPSS
SaveExploits0
NVD
NVD
•added 2014/10/27 8:55 p.m.•43 views

CVE-2011-2702

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

6.8CVSS7.3AI score0.08458EPSS
SaveExploits6References8
Cvelist
Cvelist
•added 2014/10/27 8:00 p.m.•60 views

CVE-2011-2702

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

7.2AI score0.08458EPSS
SaveExploits6References8
Mend
Mend
•added 2014/10/27 8:00 p.m.•2 views

CVE-2011-2702

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

6.8CVSS0.08458EPSS
SaveExploits6References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/27 12:00 a.m.•3 views

CVE-2011-2702: Improper Control of Generation of Code

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

6.8CVSS6.5AI score0.08458EPSS
SaveExploits6References2
RedHat Linux
RedHat Linux
•added 2014/09/22 4:00 a.m.•12 views

qemu: virtio-net: buffer overflow on invalid state load

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS7.5AI score0.04944EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2014/07/23 4:15 p.m.•19 views

qemu: virtio-net: buffer overflow on invalid state load

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS7.5AI score0.04944EPSS
SaveExploits0References4
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•35 views

Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

No description provided by source. Exploit Title: ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability Date: 2010-04-08 Author: ZSploit.com Software Link: N/A Version: N/A Tested on: IBM Informix Dynamic Server 10.0 CVE : CVE-2009-2754 ! /usr/bin/env python...

10CVSS0.3AI score0.40058EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•31 views

openSUSE Security Update : lighttpd (openSUSE-SU-2012:0240-1)

This update of lighttpd fixes an out-of-bounds read due to a signedness error which could cause a Denial of Service CVE-2011-4362. Additionally an option was added to honor the server cipher order resolves lighttpd2364. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

5CVSS6.3AI score0.21106EPSS
SaveExploits8References3
Mend
Mend
•added 2014/06/11 2:00 p.m.•2 views

CVE-2014-2977

Multiple integer signedness errors in the DispatchWrite function in proxy/dispatcher/idirectfbsurfacedispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow...

10CVSS0.06776EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2014/06/11 12:00 a.m.•3 views

PT-2014-4999

Name of the Vulnerable Software and Affected Versions DirectFB version 1.4.13 Description The issue is related to multiple integer signedness errors in the Dispatch Write function, which can be triggered via the Voodoo interface. This can lead to a denial of service crash and potentially allow th...

10CVSS0.06776EPSS
SaveExploits0References25
RedHat Linux
RedHat Linux
•added 2014/06/09 2:35 p.m.•23 views

qemu: virtio-net: buffer overflow on invalid state load

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS7.5AI score0.04944EPSS
SaveExploits0References4
OSV
OSV
•added 2014/05/14 12:55 a.m.•21 views

DEBIAN-CVE-2014-1909

Integer signedness error in system/core/adb/adbclient.c in Android Debug Bridge ADB for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow...

7.5CVSS7.8AI score0.02061EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/14 12:00 a.m.•5 views

CVE-2014-1909: Undefined Security Weakness

Integer signedness error in system/core/adb/adbclient.c in Android Debug Bridge ADB for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow...

7.5CVSS6.8AI score0.02061EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2014/05/14 12:00 a.m.•2 views

PT-2014-4359

Name of the Vulnerable Software and Affected Versions Android SDK Platform Tools version 18.0.1 Description The issue is caused by an integer signedness error in the system/core/adb/adb client.c file of the Android Debug Bridge ADB for Android 4.4. This error allows ADB servers to execute arbitra...

7.5CVSS0.02061EPSS
SaveExploits2References11
Mend
Mend
•added 2014/05/14 12:00 a.m.•2 views

CVE-2014-1909

Integer signedness error in system/core/adb/adbclient.c in Android Debug Bridge ADB for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow...

7.5CVSS0.02061EPSS
SaveExploits2References5
Rows per page
Query Builder