Numeric Errors — CVEs by weakness type

Debian Linux HIGH 7.8

CVE-2013-2487

epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer …

Mitigation only

Fix from $1,950 2013-03-07

Debian Linux MEDIUM 6.1

CVE-2013-2486

The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark …

Mitigation only

Fix from $1,600 2013-03-07

Linux Kernel MEDIUM 6.2

CVE-2013-0228

The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an …

Fix: after 3.7.8

Fix from $1,600 2013-03-01

Codesys Gateway Server HIGH 7.8

CVE-2012-4706

Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that …

Fix: after 2.3.9.20

Fix from $1,950 2013-02-24

Encryption Desktop MEDIUM 6.9

CVE-2012-4351

Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a cra…

Mitigation only

Fix from $1,600 2013-02-18

Flash Player HIGH 10.0

CVE-2013-0639EPSS 13%

Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on…

Fix: 3.6.0.597 / 3.6.0.599+

Fix from $1,950 2013-02-12

Miniupnpd HIGH 7.8

CVE-2013-1462

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote atta…

Mitigation only

Fix from $1,950 2013-01-31

Chrome HIGH 7.5

CVE-2012-5149

Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have un…

Fix: after 24.0.1312.51

Fix from $1,950 2013-01-15

Chrome MEDIUM 6.8

CVE-2012-5151

Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact …

Fix: after 24.0.1312.51

Fix from $1,600 2013-01-15

Chrome HIGH 7.5

CVE-2012-5154

Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other imp…

Fix: after 24.0.1312.51

Fix from $1,950 2013-01-15

Acrobat HIGH 10.0

CVE-2013-0613EPSS 10%

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code …

Mitigation only

Fix from $1,950 2013-01-10

Acrobat HIGH 10.0

CVE-2013-0609EPSS 7%

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code …

Mitigation only

Fix from $1,950 2013-01-10

Xml Core Services HIGH 8.8

CVE-2013-0006EPSS 28%

Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary cod…

Mitigation only

Fix from $1,950 2013-01-09

Twiki MEDIUM 5.0

CVE-2012-6330EPSS 36%

The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a de…

Fix: after 5.1.2

Fix from $1,600 2013-01-04

Flash Player HIGH 10.0

CVE-2012-5677EPSS 7%

Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on…

Fix: 3.5.0.880 / 3.5.0.890+

Fix from $1,950 2012-12-12

Wireshark MEDIUM 5.0

CVE-2012-6056

Integer overflow in the dissect_sack_chunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows rem…

Patch available