Lucene search
K

741 matches found

Cvelist
Cvelist
added 2013/04/03 10:0 a.m.20 views

CVE-2013-0800

Integer signedness error in the pixmanfillsse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows...

9.8AI score0.02798EPSS
Exploits0References12
CVE
CVE
added 2013/04/03 10:0 a.m.137 views

CVE-2013-0800

CVE-2013-0800 : An integer signedness error in the pixman_fill_sse2 function (pixman-sse2.c) used by Cairo and shipped with Mozilla Firefox and related products allows a remote attacker to trigger an out-of-bounds write via crafted values (negative box boundary or negative box size). This affects...

6.8CVSS9.7AI score0.02798EPSS
Exploits0References12Affected Software4
UbuntuCve
UbuntuCve
added 2013/04/03 12:0 a.m.21 views

CVE-2013-0800

Integer signedness error in the pixmanfillsse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows...

6.8CVSS7.6AI score0.02798EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2013/03/25 12:0 a.m.29 views

CVE-2013-0211

Integer signedness error in the archivewritezipdata function in archivewritesetformatzip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service crash via unspecified vectors, which triggers an improper conversion between...

5CVSS6.9AI score0.01196EPSS
Exploits0References2
CVE
CVE
added 2013/03/07 3:0 p.m.67 views

CVE-2013-2481

Wireshark Mount dissector vulnerability CVE-2013-2481: in epan/dissectors/packet-mount.c, a signed integer length negative value (when nfs_file_name_snooping is enabled) can crash the application, affecting Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6. The issue is fixed in Wireshark rele...

2.9CVSS6.3AI score0.01195EPSS
Exploits0References11Affected Software1
Cvelist
Cvelist
added 2013/03/07 3:0 p.m.22 views

CVE-2013-2481

Integer signedness error in the dissectmountdirpathcall function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfsfilenamesnooping is enabled, allows remote attackers to cause a denial of service application crash via a...

6.2AI score0.01195EPSS
Exploits0References11
NVD
NVD
added 2013/02/24 11:48 a.m.11 views

CVE-2012-4706

Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow...

7.8CVSS6.6AI score0.00608EPSS
Exploits0References1
CVE
CVE
added 2013/02/24 11:0 a.m.130 views

CVE-2012-4706

CVE-2012-4706 affects the 3S CODESYS Gateway-Server prior to version 2.3.9.27. The vulnerability is a heap-based buffer overflow caused by a signedness/error in processing a crafted TCP packet (port 1211), enabling remote denial of service. Documents indicate this is part of a set of vulnerabilit...

7.8CVSS6.8AI score0.00608EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2013/02/24 11:0 a.m.26 views

CVE-2012-4706

Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow...

6.6AI score0.00608EPSS
Exploits0References1
NVD
NVD
added 2013/01/31 9:55 p.m.21 views

CVE-2013-1462

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service incorrect memory copy via a SOAPAction header that lacks a " double quote character, a different vulnerability th...

7.8CVSS6.5AI score0.00693EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2013/01/31 9:55 p.m.22 views

CVE-2013-1462

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service incorrect memory copy via a SOAPAction header that lacks a " double quote character, a different vulnerability th...

7.8CVSS6.1AI score0.00693EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2013/01/31 9:0 p.m.26 views

CVE-2013-1462

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service incorrect memory copy via a SOAPAction header that lacks a " double quote character, a different vulnerability th...

7.8CVSS6.1AI score0.00693EPSS
Exploits0
CVE
CVE
added 2013/01/31 9:0 p.m.51 views

CVE-2013-1462

Technical details for CVE-2013-1462 are not provided in the supplied documents; connected items discuss other CVEs (e.g., CVE-2013-0230) and related exploits. Monitor for updates.

7.8CVSS6.5AI score0.00693EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2012/08/16 10:38 a.m.19 views

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

5.4CVSS7.4AI score0.00919EPSS
Exploits1References12
OSV
OSV
added 2012/08/16 10:38 a.m.5 views

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

7.8AI score
Exploits0References13
UbuntuCve
UbuntuCve
added 2012/08/16 10:38 a.m.27 views

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

5.4CVSS7.7AI score0.00919EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2012/08/16 10:0 a.m.26 views

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

5.4CVSS8.1AI score0.00919EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.36 views

Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64

An array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format RTF files. An attacker could use these flaws to create a specially crafted RTF file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code...

9.3CVSS6.2AI score0.10918EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.256 views

CentOS Update for openoffice.org CESA-2011:0181 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS5.2AI score0.10918EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.32 views

CentOS Update for openoffice.org-base CESA-2011:0182 centos5 x86_64

Check for the Version of openoffice.org-base OpenVAS Vulnerability Test CentOS Update for openoffice.org-base CESA-2011:0182 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

9.3CVSS0.1AI score0.10918EPSS
Exploits0References2
Rows per page
Query Builder