Lucene search
K

741 matches found

NVD
NVD
added 2008/02/11 9:0 p.m.8 views

CVE-2008-0668

The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...

9.3CVSS7.4AI score0.07512EPSS
Exploits0References18
CVE
CVE
added 2008/02/11 8:0 p.m.51 views

CVE-2008-0668

CVE-2008-0668 affects Gnumeric’s Microsoft Excel plugin (excel_read_HLINK) in the gnumeric package prior to version 1.8.1. A crafted XLS file with HLINK opcodes can trigger an integer signedness error that causes an integer overflow, enabling arbitrary code execution by user-assisted remote attac...

9.3CVSS7.2AI score0.07512EPSS
Exploits0References18Affected Software1
UbuntuCve
UbuntuCve
added 2007/11/23 8:46 p.m.21 views

CVE-2007-6113

Integer signedness error in the DNP3 dissector in Wireshark formerly Ethereal 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service long loop via a malformed DNP3 packet...

4.3CVSS5.9AI score0.08646EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2007/11/23 8:0 p.m.19 views

CVE-2007-6113

Integer signedness error in the DNP3 dissector in Wireshark formerly Ethereal 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service long loop via a malformed DNP3 packet...

4.3CVSS5.2AI score0.08646EPSS
Exploits0
NVD
NVD
added 2007/11/15 1:46 a.m.20 views

CVE-2007-4686

Integer signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to cause a denial of service system shutdown or gain privileges via a crafted TIOCSETD ioctl request...

7.2CVSS5.9AI score0.00161EPSS
Exploits1References10
NVD
NVD
added 2007/11/15 1:46 a.m.13 views

CVE-2007-4268

Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value,...

7.8CVSS7.4AI score0.00748EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/11/15 1:0 a.m.21 views

CVE-2007-4268

Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value,...

7.4AI score0.00748EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/11/15 1:0 a.m.22 views

CVE-2007-4686

Integer signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to cause a denial of service system shutdown or gain privileges via a crafted TIOCSETD ioctl request...

6.8AI score0.00161EPSS
Exploits1References10
CVE
CVE
added 2007/11/15 1:0 a.m.53 views

CVE-2007-4686

The CVE-2007-4686 issue affects Apple Mac OS X xnu kernel (tty.c) on 10.4–10.4.10. A crafted TIOCSETD ioctl can take advantage of a signedness/overflow flaw in ttioctl, allowing a local attacker to cause a system crash or gain kernel privileges by abusing the line-discipline switch in ttioctl. Th...

7.2CVSS6.8AI score0.00161EPSS
Exploits1References10Affected Software2
OSV
OSV
added 2007/10/30 10:46 p.m.6 views

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

6.8AI score
Exploits0References22
UbuntuCve
UbuntuCve
added 2007/10/30 10:46 p.m.28 views

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

7.2CVSS5.9AI score0.00041EPSS
Exploits0References1
CVE
CVE
added 2007/10/30 10:0 p.m.87 views

CVE-2007-1321

CVE-2007-1321 is a local heap-based buffer overflow in the QEMU NE2000 emulator (NE2000 network device) used by Xen and possibly other products. It stems from an integer signedness error that lets crafted register values bypass sanity checks and trigger overflow. Public references indicate relate...

7.2CVSS6.8AI score0.00041EPSS
Exploits0References21Affected Software1
Cvelist
Cvelist
added 2007/10/30 10:0 p.m.22 views

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

6.8AI score0.00041EPSS
Exploits0References21
Debian CVE
Debian CVE
added 2007/10/30 10:0 p.m.45 views

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

7.2CVSS6.9AI score0.00041EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:0 a.m.23 views

openSUSE 10 Security Update : opera (opera-1313)

Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. CVE-2006-1834 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

5.1CVSS5.9AI score0.15762EPSS
Exploits1References1
Prion
Prion
added 2007/10/05 12:17 a.m.14 views

Integer overflow

Integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the IPEEK ioctl...

4.9CVSS6.1AI score0.00278EPSS
Exploits7References13Affected Software1
NVD
NVD
added 2007/07/25 5:30 p.m.8 views

CVE-2007-3965

Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments...

6.8CVSS6.7AI score0.00489EPSS
Exploits0References4
Prion
Prion
added 2007/07/25 5:30 p.m.10 views

Integer overflow

Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments...

6.8CVSS7.2AI score0.00489EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2007/07/25 5:0 p.m.37 views

CVE-2007-3965

CVE-2007-3965 affects uFMOD prior to 1.2.5. The vulnerability is described as unspecified with unknown impact and attack vectors, and may relate to malformed files and a possible integer signedness error for relative note instruments. No concrete exploitation details, affected platforms beyond th...

6.8CVSS6.7AI score0.00489EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2007/07/25 5:0 p.m.12 views

CVE-2007-3965

Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments...

6.7AI score0.00489EPSS
Exploits0References4
Rows per page
Query Builder