1329 matches found
PT-2014-4359
Name of the Vulnerable Software and Affected Versions Android SDK Platform Tools version 18.0.1 Description The issue is caused by an integer signedness error in the system/core/adb/adb client.c file of the Android Debug Bridge ADB for Android 4.4. This error allows ADB servers to execute arbitra...
Apple QuickTime QTVR QTVRStringAtom Parsing Buffer Overflow - Ver2 (CVE-2012-0667)
A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a signedness error when processing a specially crafted QTVR string. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cau...
wireshark: Integer signedness error in the Bluetooth SDP dissector (wnpa-sec-2013-45)
Integer signedness error in the gettypelength function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service loop and CPU consumption via a crafted packet...
CVE-2014-1245
Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted stsz atom in a movie file...
Integer overflow
Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted stsz atom in a movie file...
CVE-2014-1245
Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted stsz atom in a movie file...
CVE-2014-1261
Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Unicode font...
CVE-2014-1245
Apple QuickTime before 7.7.5 contains a vulnerability in the processing of the stsz atom within movie files. This can allow remote code execution or a crash when a crafted stsz value is processed in a QuickTime viewing context. Exploitation requirements include user interaction (per ZDI advisory)...
CVE-2014-1261
CVE-2014-1261 concerns a signedness error in CoreText on Apple OS X Mavericks before 10.9.2. The vulnerability allows remoteCode execution or a denial of service via a crafted Unicode font when applications load fonts, per the NVD description. Affected product: OS X Mavericks (and OS X before 10....
CVE-2014-1245: Undefined Security Weakness
Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted stsz atom in a movie file...
CVE-2014-1261: Undefined Security Weakness
Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Unicode font...
PT-2014-4031
Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.5 Description The issue is related to an integer signedness error that can be triggered by a crafted stsz atom in a movie file, allowing remote attackers to execute arbitrary code or cause a denial of...
CVE-2013-4148
Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...
UBUNTU-CVE-2013-4148
Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...
PT-2014-3368
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.9 Description The issue is related to multiple integer signedness errors in the gdImageCrop function, which can be exploited by remote attackers to cause a denial of service or obtain sensitive information. This can b...
CVE-2013-7328: Undefined Security Weakness
Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service application crash or obtain sensitive information via an imagecrop function call with a negative value for the 1 x or 2 y dimension, a...
DEBIAN-CVE-2013-6489
Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service segmentation fault via a crafted emoticon value, which triggers an integer overflow and a buffer overflow...
CVE-2013-6489
Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service segmentation fault via a crafted emoticon value, which triggers an integer overflow and a buffer overflow...
CVE-2013-6489
CVE-2013-6489 is a Pidgin vulnerability in the MXit functionality where an integer signedness error on a crafted MXit emoticon value can trigger an integer overflow and a buffer overflow, leading to a DoS (segmentation fault) or application crash. Affected product is Pidgin (libpurple) up through...
