Memory Buffer Bounds Error — CVEs by weakness type

Xnview HIGH 9.3

CVE-2013-2577EPSS 12%

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

Fix: after 2.03

Fix from $1,950 2013-08-09

Firefox HIGH 10.0

CVE-2013-1705

Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote at…

Fix: after 22.0

Fix from $1,950 2013-08-07

Firefox HIGH 7.2

CVE-2013-1706

Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0…

Fix: after 22.0

Fix from $1,950 2013-08-07

Firefox HIGH 7.2

CVE-2013-1707

Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunder…

Fix: after 22.0

Fix from $1,950 2013-08-07

Backup Exec HIGH 7.9

CVE-2013-4575

Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows re…

Mitigation only

Fix from $1,950 2013-08-05

Workspace Virtualization MEDIUM 6.6

CVE-2013-4679

Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges…

Fix: after 6.4.1895.0

Fix from $1,600 2013-08-05

Intelligent Platforms Proficy Hmi\/scada Cimplicity HIGH 9.3

CVE-2013-2785

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, …

Mitigation only

Fix from $1,950 2013-07-31

Ultra Mini Httpd HIGH 10.0

CVE-2013-5019EPSS 64%

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.

Mitigation only

Fix from $1,950 2013-07-31

Radius HIGH 7.5

CVE-2013-2220

Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of serv…

Fix: after 1.2.6

Fix from $1,950 2013-07-31

Curl MEDIUM 6.8

CVE-2013-2174EPSS 11%

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause…

Patch available

Fix from $1,600 2013-07-31

Digital Editions HIGH 10.0

CVE-2013-1377

Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified v…

Patch available

Fix from $1,950 2013-07-31

Wireshark MEDIUM 5.0

CVE-2013-4933

The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly all…

Patch available

Fix from $1,600 2013-07-30

Wireshark MEDIUM 5.0

CVE-2013-4920

The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of…

Patch available

Fix from $1,600 2013-07-30

Spreadsheets 2012 HIGH 9.3

CVE-2013-0723

Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memor…

Mitigation only

Fix from $1,950 2013-07-29

Aironet 3600 MEDIUM 5.4

CVE-2013-3441

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device crash) by disrupting Cisco Wireles…

Mitigation only

Fix from $1,600 2013-07-23

Keyview Idol HIGH 9.3

CVE-2012-6349

Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrar…

Mitigation only