Browse CVEs

MEDIUM 5.1 CVE-2010-2801 Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers … Cabextract after 1.2 Fix from $1,6002010-08-09 HIGH 9.3 CVE-2010-2862EPSS 16% Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType… Acrobat Reader Mitigation only Fix from $1,9502010-08-05 HIGH 9.3 CVE-2010-1791EPSS 6% Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows … Safari after 5.0 Fix from $1,9502010-07-30 HIGH 9.3 CVE-2010-2752EPSS 10% Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1… Firefox after 2.0.5 Fix from $1,9502010-07-30 HIGH 9.3 CVE-2010-1214EPSS 8% Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitr… Firefox after 2.0.5 Fix from $1,9502010-07-30 HIGH 7.5 CVE-2010-1766 Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as … Qt after 4.6.2 Fix from $1,9502010-07-22 HIGH 9.3 CVE-2010-2206EPSS 7% Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers… Acrobat Patch available Fix from $1,9502010-06-30 MEDIUM 5.0 CVE-2010-1930EPSS 8% Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree pa… Imanager No fix yet Fix from $1,6002010-06-28 HIGH 9.3 CVE-2010-1196 Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird bef… Firefox after 3.0.4 Fix from $1,9502010-06-24 HIGH 9.3 CVE-2010-1199EPSS 11% Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and… Firefox after 3.0.4 Fix from $1,9502010-06-24 MEDIUM 6.8 CVE-2010-2065EPSS 6% Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibl… Libtiff after 3.9.2 Fix from $1,6002010-06-24 HIGH 7.5 CVE-2010-1380 Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or … Mac Os X Patch available Fix from $1,9502010-06-17 MEDIUM 6.8 CVE-2010-1411EPSS 13% Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac … Mac Os X Patch available Fix from $1,6002010-06-17 HIGH 9.3 CVE-2010-2170EPSS 7% Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execut… Flash Player after 1.5.3.9130 Fix from $1,9502010-06-15 HIGH 9.3 CVE-2010-2181EPSS 7% Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execut… Flash Player after 1.5.3.9130 Fix from $1,9502010-06-15 HIGH 9.3 CVE-2010-2183EPSS 7% Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execut… Flash Player after 1.5.3.9130 Fix from $1,9502010-06-15 HIGH 10.0 CVE-2010-2054EPSS 5% Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value,… Sblim Sfcb Mitigation only Fix from $1,9502010-06-15 MEDIUM 5.0 CVE-2010-2156EPSS 76% ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID. Dhcp No fix yet Fix from $1,6002010-06-07 MEDIUM 5.0 CVE-2009-4880EPSS 11% Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attacke… Glibc after 2.10.1 Fix from $1,6002010-06-01 MEDIUM 5.0 CVE-2009-4881 Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.… Glibc after 2.9 Fix from $1,6002010-06-01 MEDIUM 5.1 CVE-2010-0830 Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through … Glibc Patch available Fix from $1,6002010-06-01 HIGH 9.3 CVE-2010-1938EPSS 22% Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE… FreeBSD after 2.4.1 Fix from $1,9502010-05-28 MEDIUM 6.8 CVE-2010-1513 Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related… Ziproxy after 3.0.0 Fix from $1,6002010-05-26 MEDIUM 6.8 CVE-2010-0539 Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Updat… Java 1.5 Patch available Fix from $1,6002010-05-21 HIGH 9.3 CVE-2010-0816EPSS 20% Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 a… Outlook Express No fix yet Fix from $1,9502010-05-12 HIGH 7.2 CVE-2010-1620 Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to exec… Gnustep Base after 1.19.3 Fix from $1,9502010-05-12 MEDIUM 6.8 CVE-2010-0827 Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possib… Tex Live after 2009 Fix from $1,6002010-05-07 MEDIUM 6.8 CVE-2010-1440 Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of servic… Tetex after 2009 Fix from $1,6002010-05-07 HIGH 7.1 CVE-2010-1166EPSS 5% The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of … X.org Patch available Fix from $1,9502010-04-29 MEDIUM 5.0 CVE-2010-1158 Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption an… Perl No fix yet Fix from $1,6002010-04-20