Lucene search
+L

1896 matches found

Cvelist
Cvelist
•added 2014/12/19 3:00 p.m.•34 views

CVE-2014-9381

Integer signedness error in the dissectorcvs function in dissectors/eccvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service crash via a crafted password, which triggers a large memory allocation...

6.1AI score0.02791EPSS
SaveExploits0References5
CVE
CVE
•added 2014/12/19 3:00 p.m.•70 views

CVE-2014-9381

CVE-2014-9381 affects Ettercap 0.8.x (notably prior to 0.8.2). The root cause is a signedness error in the dissector_cvs.c function, leading to vulnerability when processing crafted input (a crafted password) which can trigger a large memory allocation and cause a denial of service. Public docume...

5CVSS6.2AI score0.02791EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2014/12/19 3:00 p.m.•31 views

CVE-2014-9381

Integer signedness error in the dissectorcvs function in dissectors/eccvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service crash via a crafted password, which triggers a large memory allocation...

5CVSS6.2AI score0.02791EPSS
SaveExploits0
Mend
Mend
•added 2014/12/19 3:00 p.m.•3 views

CVE-2014-9381

Integer signedness error in the dissectorcvs function in dissectors/eccvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service crash via a crafted password, which triggers a large memory allocation...

6.9CVSS0.02791EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/19 12:00 a.m.•4 views

CVE-2014-9381: Undefined Security Weakness

Integer signedness error in the dissectorcvs function in dissectors/eccvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service crash via a crafted password, which triggers a large memory allocation...

5CVSS5.8AI score0.02791EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/12/19 12:00 a.m.•2 views

PT-2014-8976

Name of the Vulnerable Software and Affected Versions Ettercap version 0.8.1 Description The issue is caused by an integer signedness error in the dissector cvs function, which can be exploited by remote attackers to cause a denial of service crash via a crafted password. This triggers a large...

5CVSS0.02791EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2014/12/07 12:00 a.m.•4 views

PT-2015-4343

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is caused by multiple integer signedness errors in the pcf get encodings function, allowing remote attackers to cause a denial of service, including integer overflow, NULL pointer...

7.5CVSS0.05059EPSS
SaveExploits9References202
Positive Technologies
Positive Technologies
•added 2014/12/07 12:00 a.m.•2 views

PT-2015-4346

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to an integer signedness error in the Mac Read POST Resource function in base/ftobjs.c. This error can be exploited by remote attackers using a crafted Mac font, potentially...

7.5CVSS0.0571EPSS
SaveExploits12References200
OSV
OSV
•added 2014/11/04 9:55 p.m.•15 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

8.8AI score
SaveExploits0References7
Prion
Prion
•added 2014/11/04 9:55 p.m.•24 views

Integer overflow

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS7.9AI score0.04944EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2014/11/04 9:00 p.m.•39 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

8.7AI score0.04944EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2014/11/04 9:00 p.m.•36 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS8.7AI score0.04944EPSS
SaveExploits0
CVE
CVE
•added 2014/11/04 9:00 p.m.•117 views

CVE-2013-4148

The CVE-2013-4148 entry applies to QEMU 1.x prior to 1.7.2, where an integer signedness error in hw/net/virtio-net.c (virtio_net_load) can trigger a buffer overflow when loading a crafted savevm image. This enables remote code execution with the privileges of the QEMU process, via a state-load/mi...

7.5CVSS8.6AI score0.04944EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2014/11/04 9:00 p.m.•3 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS0.04944EPSS
SaveExploits0References8
NVD
NVD
•added 2014/10/27 8:55 p.m.•43 views

CVE-2011-2702

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

6.8CVSS7.3AI score0.08458EPSS
SaveExploits6References8
Cvelist
Cvelist
•added 2014/10/27 8:00 p.m.•60 views

CVE-2011-2702

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

7.2AI score0.08458EPSS
SaveExploits6References8
Mend
Mend
•added 2014/10/27 8:00 p.m.•2 views

CVE-2011-2702

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

6.8CVSS0.08458EPSS
SaveExploits6References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/27 12:00 a.m.•3 views

CVE-2011-2702: Improper Control of Generation of Code

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to 1 memcpy-ssse3-rep.S, 2 memcpy-ssse3.S, or 3 memset-sse2.S ...

6.8CVSS6.5AI score0.08458EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
•added 2014/10/27 12:00 a.m.•15 views

PT-2014-2127 · Gnu · Glibc +1

Name of the Vulnerable Software and Affected Versions: Glibc versions prior to 2.13 eglibc versions prior to 2.13 Description: The issue is related to an integer signedness error when using Supplemental Streaming SIMD Extensions 3 SSSE3 optimization. This error allows context-dependent attackers ...

6.8CVSS7.1AI score0.08458EPSS
SaveExploits6References10
RedHat Linux
RedHat Linux
•added 2014/09/22 4:00 a.m.•12 views

qemu: virtio-net: buffer overflow on invalid state load

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS7.5AI score0.04944EPSS
SaveExploits0References4
Rows per page
Query Builder