Lucene search
K

1012 matches found

CVE
CVE
added 2008/04/10 7:0 p.m.122 views

CVE-2008-1721

CVE-2008-1721: An integer signedness error in the zlib extension module of Python 2.5.2 and earlier enables remote code execution via a negative signed integer, triggering insufficient memory allocation and a buffer overflow. The connected documents corroborate the CVE presence across multiple ad...

7.5CVSS8AI score0.22811EPSS
Exploits1References33Affected Software1
Cvelist
Cvelist
added 2008/04/10 7:0 p.m.20 views

CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

8AI score0.22811EPSS
Exploits1References33
FreeBSD
FreeBSD
added 2008/04/10 12:0 a.m.46 views

python -- Integer Signedness Error in zlib Module

Justin Ferguson reports: Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

7.5CVSS6.2AI score0.22811EPSS
Exploits1References2
NVD
NVD
added 2008/03/11 11:44 p.m.17 views

CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

9.3CVSS7.6AI score0.04226EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2008/03/11 11:44 p.m.17 views

CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

9.3CVSS6.2AI score0.04226EPSS
Exploits0References1
CVE
CVE
added 2008/03/11 11:0 p.m.50 views

CVE-2008-0307

CVE-2008-0307 corresponds to an integer signedness error in SAP MaxDB’s vserver component that can let remote attackers execute arbitrary code by triggering heap corruption. Affected version cited: MaxDB 7.6.0.37 (and possibly others). Exploitation is described as requiring a TCP connection to th...

9.3CVSS7.6AI score0.04226EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2008/03/11 11:0 p.m.18 views

CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

7.6AI score0.04226EPSS
Exploits0References6
seebug.org
seebug.org
added 2008/03/11 12:0 a.m.37 views

Solaris 8/9/10 fifofs I_PEEK Local Kernel memory Leak Exploit

No description provided by source. / $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi [email protected] Lame integer signedness error in FIFO filesystems named pipes on Sun ...

4.9CVSS6.5AI score0.00278EPSS
Exploits7
Exploit DB
Exploit DB
added 2008/03/10 12:0 a.m.43 views

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

/ $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi Lame integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory...

4.9CVSS6.7AI score0.00278EPSS
Exploits7
NVD
NVD
added 2008/02/11 9:0 p.m.9 views

CVE-2008-0668

The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...

9.3CVSS7.4AI score0.07512EPSS
Exploits0References18
CVE
CVE
added 2008/02/11 8:0 p.m.53 views

CVE-2008-0668

CVE-2008-0668 affects Gnumeric’s Microsoft Excel plugin (excel_read_HLINK) in the gnumeric package prior to version 1.8.1. A crafted XLS file with HLINK opcodes can trigger an integer signedness error that causes an integer overflow, enabling arbitrary code execution by user-assisted remote attac...

9.3CVSS7.2AI score0.07512EPSS
Exploits0References18Affected Software1
UbuntuCve
UbuntuCve
added 2007/11/23 8:46 p.m.21 views

CVE-2007-6113

Integer signedness error in the DNP3 dissector in Wireshark formerly Ethereal 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service long loop via a malformed DNP3 packet...

4.3CVSS5.9AI score0.08646EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2007/11/23 8:0 p.m.19 views

CVE-2007-6113

Integer signedness error in the DNP3 dissector in Wireshark formerly Ethereal 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service long loop via a malformed DNP3 packet...

4.3CVSS5.2AI score0.08646EPSS
Exploits0
NVD
NVD
added 2007/11/15 1:46 a.m.22 views

CVE-2007-4686

Integer signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to cause a denial of service system shutdown or gain privileges via a crafted TIOCSETD ioctl request...

7.2CVSS5.9AI score0.00161EPSS
Exploits1References10
NVD
NVD
added 2007/11/15 1:46 a.m.14 views

CVE-2007-4268

Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value,...

7.8CVSS7.4AI score0.00748EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/11/15 1:0 a.m.24 views

CVE-2007-4686

Integer signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to cause a denial of service system shutdown or gain privileges via a crafted TIOCSETD ioctl request...

6.8AI score0.00161EPSS
Exploits1References10
Cvelist
Cvelist
added 2007/11/15 1:0 a.m.22 views

CVE-2007-4268

Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value,...

7.4AI score0.00748EPSS
Exploits1References9
CVE
CVE
added 2007/11/15 1:0 a.m.53 views

CVE-2007-4686

The CVE-2007-4686 issue affects Apple Mac OS X xnu kernel (tty.c) on 10.4–10.4.10. A crafted TIOCSETD ioctl can take advantage of a signedness/overflow flaw in ttioctl, allowing a local attacker to cause a system crash or gain kernel privileges by abusing the line-discipline switch in ttioctl. Th...

7.2CVSS6.8AI score0.00161EPSS
Exploits1References10Affected Software2
OSV
OSV
added 2007/10/30 10:46 p.m.7 views

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

6.8AI score
Exploits0References22
UbuntuCve
UbuntuCve
added 2007/10/30 10:46 p.m.28 views

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

7.2CVSS5.9AI score0.00041EPSS
Exploits0References1
Rows per page
Query Builder