Vulnerability index

Browse CVEs

4,225 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Classic Buffer OverflowCWE-120 × clear
Chrome HIGH 7.5
CVE-2011-1291

Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have …

Fix: 10.0.648.204+
Fix from $1,950 2011-03-25
Linux Kernel HIGH 7.2
CVE-2011-0712

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow att…

Fix: 2.6.38+
Fix from $1,950 2011-02-18
Fedora HIGH 7.5
CVE-2010-3441EPSS 6%

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to th…

Fix: 5.9.12+
Fix from $1,950 2011-02-18
Chrome Os HIGH 9.3
CVE-2011-0480

Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.3…

Fix: 8.0.552.237 / 8.0.552.344+
Fix from $1,950 2011-01-14
Chrome Os HIGH 9.3
CVE-2011-0481

Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly…

Fix: 8.0.552.237 / 8.0.552.344+
Fix from $1,950 2011-01-14
Linux Kernel MEDIUM 6.9
CVE-2010-4527

The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a cert…

Fix: 2.6.37+
Fix from $1,600 2011-01-13
Powerpoint HIGH 7.8
CVE-2010-2572 KEVEPSS 63%

Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document,…

Patch available
Fix from $1,950 2010-11-10
Linux Kernel HIGH 7.8
CVE-2010-2492

Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow loc…

Fix: 2.6.35+
Fix from $1,950 2010-09-08
Ubuntu Linux MEDIUM 6.8
CVE-2010-2808

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service…

Fix: 2.4.2 / 4.1.0+
Fix from $1,600 2010-08-19
Ubuntu Linux MEDIUM 6.8
CVE-2010-2499EPSS 6%

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service…

Fix: 2.4.0 / 10.6.5+
Fix from $1,600 2010-08-19
Debian Linux MEDIUM 6.8
CVE-2010-2527EPSS 6%

Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possib…

Fix: 2.4.0+
Fix from $1,600 2010-08-19
Ubuntu Linux MEDIUM 6.8
CVE-2010-2541

Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application c…

Fix: 2.4.2+
Fix from $1,600 2010-08-19
Chrome CRITICAL 9.8
CVE-2010-1205EPSS 43%

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to ex…

Fix: 2.5.5 / 3.1.2+
Fix from $2,300 2010-06-30
Explzh HIGH 9.3
CVE-2010-2434EPSS 5%

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH…

Fix: after 5.62
Fix from $1,950 2010-06-25
Windows 2003 Server HIGH 8.1
CVE-2009-2502EPSS 22%

Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP…

Mitigation only
Fix from $1,950 2009-10-14
Internet Information Server HIGH 9.0
CVE-2009-3023EPSS 91%

Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbi…

Fix: after 6.0
Fix from $1,950 2009-08-31
Vuplayer HIGH 8.8
CVE-2009-0182EPSS 48%

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, a…

Fix: after 2.49
Fix from $1,950 2009-01-20
Linux Kernel MEDIUM 5.5
CVE-2008-3275

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creat…

Fix: 2.6.25.15+
Fix from $1,600 2008-08-12
Linux Kernel HIGH 10.0
CVE-2008-3496

Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux …

Fix: 2.6.26.1+
Fix from $1,950 2008-08-06
Directory Server HIGH 7.5
CVE-2008-1677

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of ser…

Mitigation only
Fix from $1,950 2008-05-12
Acrobat HIGH 7.8
CVE-2007-5659 KEVEPSS 94%

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arg…

Fix: 8.1.2+
Fix from $1,950 2008-02-12
Crystal Reports Xi HIGH 9.3
CVE-2008-0379EPSS 9%

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to …

No fix yet
Fix from $1,950 2008-01-22
Opera Browser HIGH 9.3
CVE-2007-2809EPSS 6%

Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafte…

Fix: 9.21+
Fix from $1,950 2007-05-22
Arcsde HIGH 10.0
CVE-2007-1770EPSS 17%

Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three …

Mitigation only
Fix from $1,950 2007-03-30
Stlport HIGH 7.5
CVE-2007-0803EPSS 6%

Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to (1) "print flo…

Fix: 5.0.3+
Fix from $1,950 2007-02-07
PHP HIGH 7.5
CVE-2007-0455EPSS 12%

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of se…

Fix: 4.4.7+
Fix from $1,950 2007-01-30
Eudora Worldmail CRITICAL 9.8
CVE-2006-6024

Multiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack vectors, as demonstrated by the …

No fix yet
Fix from $2,300 2006-11-21
Gimp MEDIUM 5.1
CVE-2006-3404

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of serv…

Fix: 2.2.12+
Fix from $1,600 2006-07-06
Office HIGH 8.8
CVE-2006-2492 KEVEPSS 48%

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-as…

Fix: after 2006
Fix from $1,950 2006-05-20
Exchange Server HIGH 7.5
CVE-2005-1987EPSS 44%

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute a…

Patch available
Fix from $1,950 2005-10-13