Browse CVEs

HIGH 7.2 CVE-2010-4502 Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and… Internet Security Suite Plus 2010 No fix yet Fix from $1,9502010-12-08 HIGH 7.5 CVE-2010-4261 Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (mem… Clamav after 0.96.4 Fix from $1,9502010-12-07 HIGH 9.3 CVE-2010-4372 Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allo… Winamp after 5.581 Fix from $1,9502010-12-02 HIGH 9.3 CVE-2010-4370EPSS 5% Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that t… Winamp after 5.581 Fix from $1,9502010-12-02 HIGH 9.3 CVE-2010-2586EPSS 6% Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Tab… Winamp after 5.581 Fix from $1,9502010-12-02 HIGH 9.3 CVE-2010-3812EPSS 7% Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Wind… Safari after 5.0.2 Fix from $1,9502010-11-22 HIGH 9.3 CVE-2010-3803EPSS 6% Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote a… Safari after 5.0.2 Fix from $1,9502010-11-22 HIGH 9.3 CVE-2010-3805EPSS 6% Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote … Safari after 5.0.2 Fix from $1,9502010-11-22 HIGH 7.5 CVE-2010-3872 A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgi… Mod Fcgid after 2.3.5 Fix from $1,9502010-11-22 MEDIUM 6.8 CVE-2010-4010 Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedd… Mac Os X Patch available Fix from $1,6002010-11-16 MEDIUM 6.8 CVE-2010-3792 Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of s… Quicktime Patch available Fix from $1,6002010-11-16 HIGH 9.3 CVE-2010-2573EPSS 21% Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute ar… Office Mitigation only Fix from $1,9502010-11-10 HIGH 10.0 CVE-2010-4070EPSS 5% Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x be… Informix Dynamic Server Mitigation only Fix from $1,9502010-10-25 MEDIUM 5.0 CVE-2010-4057EPSS 7% solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing m… Soliddb after 6.5.0.3 Fix from $1,6002010-10-23 HIGH 9.3 CVE-2010-3230EPSS 20% Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information,… Excel Mitigation only Fix from $1,9502010-10-13 HIGH 7.8 CVE-2010-1883EPSS 23% Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, … Windows 2003 Server Mitigation only Fix from $1,9502010-10-13 MEDIUM 5.1 CVE-2010-0405 Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a deni… Bzip2 after 1.0.5 Fix from $1,6002010-09-28 HIGH 9.3 CVE-2010-2765EPSS 6% Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x b… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3000EPSS 7% Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows… Realplayer Mitigation only Fix from $1,9502010-08-30 HIGH 9.3 CVE-2010-0116EPSS 6% Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute … Realplayer Mitigation only Fix from $1,9502010-08-30 HIGH 9.3 CVE-2009-3743EPSS 7% Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitr… Afpl Ghostscript after 8.70 Fix from $1,9502010-08-26 HIGH 9.3 CVE-2010-2935EPSS 7% simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary … Openoffice.org Mitigation only Fix from $1,9502010-08-25 HIGH 9.3 CVE-2010-2936EPSS 7% Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of se… Openoffice.org Mitigation only Fix from $1,9502010-08-25 MEDIUM 6.8 CVE-2010-1526 Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via (1) a crafted TIFF file, related to th… Libgdiplus Mitigation only Fix from $1,6002010-08-24 HIGH 9.3 CVE-2010-1516 Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via (1) a crafted PNG file, related to the getPNG funct… Swftools Mitigation only Fix from $1,9502010-08-17 HIGH 10.0 CVE-2010-3032EPSS 6% Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers… Crystal Reports Mitigation only Fix from $1,9502010-08-17 HIGH 9.3 CVE-2010-1525 Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other pro… Keyview Export Sdk Mitigation only Fix from $1,9502010-08-17 HIGH 9.3 CVE-2010-0134 Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attacke… Keyview Export Sdk Mitigation only Fix from $1,9502010-08-17 MEDIUM 6.8 CVE-2010-1519 Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to (… Glpng Mitigation only Fix from $1,6002010-08-16 HIGH 10.0 CVE-2010-2995EPSS 7% The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause… Wireshark Mitigation only Fix from $1,9502010-08-13