Lucene search
K

741 matches found

NVD
NVD
added 2008/06/16 8:41 p.m.16 views

CVE-2008-2710

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

7.2CVSS7.2AI score0.00081EPSS
Exploits1References8
Prion
Prion
added 2008/06/16 8:41 p.m.17 views

Integer overflow

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

7.2CVSS7.5AI score0.00081EPSS
Exploits1References8Affected Software2
CVE
CVE
added 2008/06/16 8:0 p.m.53 views

CVE-2008-2710

CVE-2008-2710 affects Sun Solaris 10 and OpenSolaris prior to SNV_92. The kernel component involved is ip_set_srcfilter in uts/common/inet/ip/ip_multi.c, where a signedness issue can trigger an out-of-bounds write via an SIOCSIPMSFILTER IOCTL with a large imsf->imsf_numsrc, enabling local user...

7.2CVSS7.2AI score0.00081EPSS
Exploits1References8Affected Software3
Cvelist
Cvelist
added 2008/06/16 8:0 p.m.19 views

CVE-2008-2710

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

7.2AI score0.00081EPSS
Exploits1References8
UbuntuCve
UbuntuCve
added 2008/05/21 1:24 p.m.23 views

CVE-2008-1950

Integer signedness error in the gnutlsciphertext2compressed function in lib/gnutlscipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service buffer over-read and crash via a certain integer value in the Random field in an encrypted Client Hello message withi...

5CVSS7AI score0.08239EPSS
Exploits1References2
NVD
NVD
added 2008/05/21 1:24 p.m.15 views

CVE-2008-1950

Integer signedness error in the gnutlsciphertext2compressed function in lib/gnutlscipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service buffer over-read and crash via a certain integer value in the Random field in an encrypted Client Hello message withi...

5CVSS6.2AI score0.08239EPSS
Exploits1References40
Cvelist
Cvelist
added 2008/05/21 10:0 a.m.22 views

CVE-2008-1950

Integer signedness error in the gnutlsciphertext2compressed function in lib/gnutlscipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service buffer over-read and crash via a certain integer value in the Random field in an encrypted Client Hello message withi...

6.1AI score0.08239EPSS
Exploits1References40
NVD
NVD
added 2008/05/12 10:20 p.m.15 views

CVE-2008-1803

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

9.3CVSS7.3AI score0.16371EPSS
Exploits2References24
OSV
OSV
added 2008/05/12 10:20 p.m.6 views

CVE-2008-1803

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

7.3AI score
Exploits0References24
Cvelist
Cvelist
added 2008/05/12 10:0 p.m.17 views

CVE-2008-1803

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

7.2AI score0.16371EPSS
Exploits2References24
CVE
CVE
added 2008/05/12 10:0 p.m.60 views

CVE-2008-1803

CVE-2008-1803 affects rdesktop 1.5.0, describing an integer signedness error in xrealloc() that can cause a heap-based overflow and remote code execution. The connected advisories confirm related fixes in multiple distributions (e.g., RHSA-2008-0575; CentOS CES A-2008:0575; Ubuntu USN-646-1), ind...

9.3CVSS7.2AI score0.16371EPSS
Exploits2References24Affected Software1
NVD
NVD
added 2008/04/16 5:5 p.m.15 views

CVE-2008-1842

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

10CVSS7.7AI score0.3036EPSS
Exploits1References9
Cvelist
Cvelist
added 2008/04/16 5:0 p.m.20 views

CVE-2008-1842

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

7.7AI score0.3036EPSS
Exploits1References9
Cvelist
Cvelist
added 2008/04/10 7:0 p.m.20 views

CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

8AI score0.22811EPSS
Exploits1References33
FreeBSD
FreeBSD
added 2008/04/10 12:0 a.m.46 views

python -- Integer Signedness Error in zlib Module

Justin Ferguson reports: Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

7.5CVSS6.2AI score0.22811EPSS
Exploits1References2
NVD
NVD
added 2008/03/11 11:44 p.m.17 views

CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

9.3CVSS7.6AI score0.04226EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2008/03/11 11:44 p.m.17 views

CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

9.3CVSS6.2AI score0.04226EPSS
Exploits0References1
CVE
CVE
added 2008/03/11 11:0 p.m.50 views

CVE-2008-0307

CVE-2008-0307 corresponds to an integer signedness error in SAP MaxDB’s vserver component that can let remote attackers execute arbitrary code by triggering heap corruption. Affected version cited: MaxDB 7.6.0.37 (and possibly others). Exploitation is described as requiring a TCP connection to th...

9.3CVSS7.6AI score0.04226EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2008/03/11 11:0 p.m.18 views

CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

7.6AI score0.04226EPSS
Exploits0References6
seebug.org
seebug.org
added 2008/03/11 12:0 a.m.37 views

Solaris 8/9/10 fifofs I_PEEK Local Kernel memory Leak Exploit

No description provided by source. / $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi [email protected] Lame integer signedness error in FIFO filesystems named pipes on Sun ...

4.9CVSS6.5AI score0.00278EPSS
Exploits7
Rows per page
Query Builder