Memory Buffer Bounds Error — CVEs by weakness type

Openconnect MEDIUM 5.0

CVE-2012-6128

Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash)…

Fix: after 4.07

Fix from $1,600 2013-02-24

Sssd MEDIUM 5.0

CVE-2013-0220

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_r…

Fix: after 1.9.3

Fix from $1,600 2013-02-24

Codesys Gateway Server HIGH 10.0

CVE-2012-4708EPSS 7%

Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.

Fix: after 2.3.9.20

Fix from $1,950 2013-02-24

Bigant Im Message Server HIGH 10.0

CVE-2012-6275EPSS 46%

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1…

Mitigation only

Fix from $1,950 2013-02-24

Pdf Reader HIGH 9.3

CVE-2013-0113

Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

Mitigation only

Fix from $1,950 2013-02-24

Chrome HIGH 7.5

CVE-2013-0896

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling …

Fix: 25.0.1364.97 / 25.0.1364.99+

Fix from $1,950 2013-02-23

Vcenter Server HIGH 7.8

CVE-2012-6326

VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service…

Patch available

Fix from $1,950 2013-02-22

Linux Kernel MEDIUM 6.6

CVE-2013-0310

The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointe…

Fix: after 3.4.7

Fix from $1,600 2013-02-22

Firefox MEDIUM 5.8

CVE-2013-0772

The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to…

Fix: 2.16 / 19.0+

Fix from $1,600 2013-02-19

Pidgin MEDIUM 6.8

CVE-2013-0272

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long…

Fix: after 2.10.6

Fix from $1,600 2013-02-16

Kingview HIGH 10.0

CVE-2012-4711EPSS 61%

Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.…

Mitigation only

Fix from $1,950 2013-02-15

Accutech Manager HIGH 10.0

CVE-2013-0658EPSS 22%

Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbit…

Fix: after 2.00.1

Fix from $1,950 2013-02-15

Flash Player HIGH 10.0

CVE-2013-1372EPSS 10%

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on …

Fix: 3.6.0.597 / 3.6.0.599+