Browse CVEs

HIGH 7.5 CVE-2011-1291 Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have … Chrome 10.0.648.204+ Fix from $1,9502011-03-25 HIGH 7.2 CVE-2011-0712 Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow att… Linux Kernel 2.6.38+ Fix from $1,9502011-02-18 HIGH 7.5 CVE-2010-3441EPSS 6% Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to th… Fedora 5.9.12+ Fix from $1,9502011-02-18 HIGH 9.3 CVE-2011-0480 Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.3… Chrome Os 8.0.552.237 / 8.0.552.344+ Fix from $1,9502011-01-14 HIGH 9.3 CVE-2011-0481 Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly… Chrome Os 8.0.552.237 / 8.0.552.344+ Fix from $1,9502011-01-14 MEDIUM 6.9 CVE-2010-4527 The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a cert… Linux Kernel 2.6.37+ Fix from $1,6002011-01-13 HIGH 7.8 CVE-2010-2572 KEVEPSS 63% Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document,… Powerpoint Patch available Fix from $1,9502010-11-10 HIGH 7.8 CVE-2010-2492 Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow loc… Linux Kernel 2.6.35+ Fix from $1,9502010-09-08 MEDIUM 6.8 CVE-2010-2808 Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service… Ubuntu Linux 2.4.2 / 4.1.0+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2499EPSS 6% Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service… Ubuntu Linux 2.4.0 / 10.6.5+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2527EPSS 6% Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possib… Debian Linux 2.4.0+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2541 Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application c… Ubuntu Linux 2.4.2+ Fix from $1,6002010-08-19 CRITICAL 9.8 CVE-2010-1205EPSS 43% Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to ex… Chrome 2.5.5 / 3.1.2+ Fix from $2,3002010-06-30 HIGH 9.3 CVE-2010-2434EPSS 5% Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH… Explzh after 5.62 Fix from $1,9502010-06-25 HIGH 8.1 CVE-2009-2502EPSS 22% Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP… Windows 2003 Server Mitigation only Fix from $1,9502009-10-14 HIGH 9.0 CVE-2009-3023EPSS 91% Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbi… Internet Information Server after 6.0 Fix from $1,9502009-08-31 HIGH 8.8 CVE-2009-0182EPSS 48% Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, a… Vuplayer after 2.49 Fix from $1,9502009-01-20 MEDIUM 5.5 CVE-2008-3275 The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creat… Linux Kernel 2.6.25.15+ Fix from $1,6002008-08-12 HIGH 10.0 CVE-2008-3496 Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux … Linux Kernel 2.6.26.1+ Fix from $1,9502008-08-06 HIGH 7.5 CVE-2008-1677 Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of ser… Directory Server Mitigation only Fix from $1,9502008-05-12 HIGH 7.8 CVE-2007-5659 KEVEPSS 94% Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arg… Acrobat 8.1.2+ Fix from $1,9502008-02-12 HIGH 9.3 CVE-2008-0379EPSS 9% Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to … Crystal Reports Xi No fix yet Fix from $1,9502008-01-22 HIGH 9.3 CVE-2007-2809EPSS 6% Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafte… Opera Browser 9.21+ Fix from $1,9502007-05-22 HIGH 10.0 CVE-2007-1770EPSS 17% Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three … Arcsde Mitigation only Fix from $1,9502007-03-30 HIGH 7.5 CVE-2007-0803EPSS 6% Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to (1) "print flo… Stlport 5.0.3+ Fix from $1,9502007-02-07 HIGH 7.5 CVE-2007-0455EPSS 12% Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of se… PHP 4.4.7+ Fix from $1,9502007-01-30 CRITICAL 9.8 CVE-2006-6024 Multiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack vectors, as demonstrated by the … Eudora Worldmail No fix yet Fix from $2,3002006-11-21 MEDIUM 5.1 CVE-2006-3404 Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of serv… Gimp 2.2.12+ Fix from $1,6002006-07-06 HIGH 8.8 CVE-2006-2492 KEVEPSS 48% Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-as… Office after 2006 Fix from $1,9502006-05-20 HIGH 7.5 CVE-2005-1987EPSS 44% Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute a… Exchange Server Patch available Fix from $1,9502005-10-13