Lucene search
K

741 matches found

Cvelist
Cvelist
added 2010/10/04 8:0 p.m.19 views

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

5.8AI score0.02701EPSS
Exploits7References24
UbuntuCve
UbuntuCve
added 2010/10/04 12:0 a.m.29 views

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

6.6CVSS7.3AI score0.02701EPSS
Exploits7References7
Prion
Prion
added 2010/08/26 9:0 p.m.14 views

Integer overflow

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

9.3CVSS8.1AI score0.09129EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2010/08/26 8:0 p.m.57 views

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

9.3CVSS7.7AI score0.23952EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2010/08/26 8:0 p.m.23 views

CVE-2010-2866

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie...

7.5AI score0.23952EPSS
Exploits0References6
CVE
CVE
added 2010/08/26 8:0 p.m.55 views

CVE-2010-2875

CVE-2010-2875 concerns an integer signedness error in Adobe Shockwave Player before 11.5.8.612, triggered while parsing the tSAC chunk in Adobe Director files. The signedness issue can cause memory corruption, enabling a remote attacker to cause a denial of service or execute arbitrary code. Affe...

9.3CVSS7.7AI score0.09129EPSS
Exploits0References5Affected Software1
OpenVAS
OpenVAS
added 2010/08/20 12:0 a.m.20 views

Mandriva Update for cabextract MDVSA-2010:154 (cabextract)

Check for the Version of cabextract OpenVAS Vulnerability Test Mandriva Update for cabextract MDVSA-2010:154 cabextract Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

5.1CVSS0.5AI score0.04956EPSS
Exploits0References2
NVD
NVD
added 2010/08/17 8:0 p.m.12 views

CVE-2010-0134

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow...

9.3CVSS7.7AI score0.04341EPSS
Exploits0References4
Cvelist
Cvelist
added 2010/08/17 5:31 p.m.19 views

CVE-2010-0134

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow...

7.7AI score0.04341EPSS
Exploits0References4
CVE
CVE
added 2010/08/17 5:31 p.m.60 views

CVE-2010-0134

CVE-2010-0134 : A signedness error in Autonomy KeyView’s rtfsr.dll (versions 10.4 and 10.9) allows remote code execution when processing the RTF \ls keyword in a list override table entry, triggering a buffer overflow. Affected products are used in various IBM, Symantec, and other bundles. Impact...

9.3CVSS8AI score0.04341EPSS
Exploits0References4Affected Software3
NVD
NVD
added 2010/08/09 11:58 a.m.12 views

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

5.1CVSS7.7AI score0.04956EPSS
Exploits0References12
OSV
OSV
added 2010/08/09 11:58 a.m.5 views

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

7.6AI score
Exploits0References13
Cvelist
Cvelist
added 2010/08/06 7:31 p.m.17 views

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

7.5AI score0.04956EPSS
Exploits0References12
Debian CVE
Debian CVE
added 2010/08/06 7:31 p.m.18 views

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

5.1CVSS7.6AI score0.04956EPSS
Exploits0
NVD
NVD
added 2010/07/30 8:30 p.m.15 views

CVE-2010-1791

Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving a JavaScript array index...

9.3CVSS8.9AI score0.07992EPSS
Exploits0References14
UbuntuCve
UbuntuCve
added 2010/07/30 8:30 p.m.32 views

CVE-2010-1791

Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving a JavaScript array index...

9.3CVSS6.2AI score0.07992EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2010/07/30 8:0 p.m.32 views

CVE-2010-1791

Removed by vendor...

9.3CVSS6.6AI score0.07992EPSS
Exploits0
Cvelist
Cvelist
added 2010/07/30 8:0 p.m.19 views

CVE-2010-1791

Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving a JavaScript array index...

9.2AI score0.07992EPSS
Exploits0References14
NVD
NVD
added 2010/06/01 8:30 p.m.18 views

CVE-2010-0830

Integer signedness error in the elfgetdynamicinfo function in elf/dynamic-link.h in ld.so in the GNU C Library aka glibc or libc6 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value...

5.1CVSS9.2AI score0.06292EPSS
Exploits0References14
OSV
OSV
added 2010/06/01 8:30 p.m.5 views

CVE-2010-0830

Integer signedness error in the elfgetdynamicinfo function in elf/dynamic-link.h in ld.so in the GNU C Library aka glibc or libc6 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value...

5.1CVSS7.3AI score0.06292EPSS
Exploits0References14
Rows per page
Query Builder