Memory Buffer Bounds Error — CVEs by weakness type

Word HIGH 9.3

CVE-2013-3892EPSS 20%

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Memory…

Mitigation only

Fix from $1,950 2013-10-09

Xper Information Management Physiomonitoring 5 HIGH 9.3

CVE-2013-2808

Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitor…

Fix: after 1.5.4.053

Fix from $1,950 2013-10-05

Pdfcool Studio MEDIUM 6.8

CVE-2013-4986

Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers…

Fix: after 3.32

Fix from $1,600 2013-10-04

Zrtpcpp HIGH 7.5

CVE-2013-2221

Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cause a denial of service (crash…

Fix: after 3.2.1

Fix from $1,950 2013-10-04

Zrtpcpp MEDIUM 6.8

CVE-2013-2222

Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (crash) and possibly execute ar…

Fix: after 3.2.1

Fix from $1,600 2013-10-04

Zrtpcpp MEDIUM 5.8

CVE-2013-2223

GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bou…

Fix: after 3.2.1

Fix from $1,600 2013-10-04

Aix MEDIUM 6.9

CVE-2013-5419

Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging…

Mitigation only

Fix from $1,600 2013-10-04

Tivoli Storage Manager HIGH 7.2

CVE-2013-2964

Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.…

Fix: after 5.5.4

Fix from $1,950 2013-10-04

Pdf Fusion HIGH 9.3

CVE-2013-0742EPSS 9%

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application cras…

No fix yet

Fix from $1,950 2013-10-03

Chrome MEDIUM 5.0

CVE-2013-2907

The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds r…

Fix: after 30.0.1599.65

Fix from $1,600 2013-10-02

Chrome MEDIUM 5.0

CVE-2013-2917

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as …

Fix: after 30.0.1599.65

Fix from $1,600 2013-10-02

Chrome HIGH 7.5

CVE-2013-2919

Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have un…

Fix: after 30.0.1599.65

Fix from $1,950 2013-10-02

Chrome MEDIUM 5.0

CVE-2013-2920

The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of ser…

Fix: after 30.0.1599.65

Fix from $1,600 2013-10-02

Freeswitch MEDIUM 6.8

CVE-2013-2238

Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of…

Patch available

Fix from $1,600 2013-09-30

Libvirt MEDIUM 5.0

CVE-2013-5651

The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bound…

Fix: after 1.1.1

Fix from $1,600 2013-09-30

Libtiff MEDIUM 6.8

CVE-2013-4244

The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds…

Fix: after 4.0.3

Fix from $1,600 2013-09-28

Proxysgos HIGH 7.1

CVE-2013-5959

Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumption and dr…

Fix: after 5.3

Fix from $1,950 2013-09-28

Android MEDIUM 6.9

CVE-2013-5933

Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic W…

Mitigation only

Fix from $1,600 2013-09-25

Unified Computing System MEDIUM 5.4

CVE-2012-4094

Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a …

Mitigation only

Fix from $1,600 2013-09-24

Seil X2 Firmware MEDIUM 6.8

CVE-2013-4709

Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware before 4.32, SEIL/X2 with fir…

Mitigation only

Fix from $1,600 2013-09-20

Lotus Domino HIGH 7.1

CVE-2013-4068

Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspe…

Patch available

Fix from $1,950 2013-09-20

Iphone Os HIGH 9.3

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds array access) …

Fix: after 6.1.4

Fix from $1,950 2013-09-19

Iphone Os MEDIUM 6.8

CVE-2013-1043

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicat…

Fix: after 6.1.4