Browse CVEs

HIGH 10.0 CVE-2015-1539EPSS 86% Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attacke… Android after 5.1 Fix from $1,9502015-10-01 HIGH 10.0 CVE-2015-1538EPSS 99% Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remot… Android after 5.1 Fix from $1,9502015-10-01 HIGH 8.5 CVE-2015-1536 Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to c… Android after 5.1 Fix from $1,9502015-10-01 HIGH 9.3 CVE-2015-1528 Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a differ… Android after 5.1 Fix from $1,9502015-10-01 HIGH 10.0 CVE-2014-7917 Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615. Android after 4.4.4 Fix from $1,9502015-10-01 HIGH 10.0 CVE-2014-7916 Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751. Android after 4.4.4 Fix from $1,9502015-10-01 HIGH 10.0 CVE-2014-7915 Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708. Android after 4.4.4 Fix from $1,9502015-10-01 MEDIUM 5.0 CVE-2015-0852 Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corrupt… Freeimage after 3.17.0 Fix from $1,6002015-09-29 HIGH 7.5 CVE-2015-6819 Multiple integer underflows in the ff_mjpeg_decode_frame function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a d… Ffmpeg after 2.7.1 Fix from $1,9502015-09-06 HIGH 7.5 CVE-2015-6525 Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause… Debian Linux Mitigation only Fix from $1,9502015-08-24 HIGH 7.5 CVE-2014-6272 Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-depend… Debian Linux Mitigation only Fix from $1,9502015-08-24 HIGH 9.3 CVE-2015-3768 Integer overflow in the kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context v… Mac Os X after 10.10.4 Fix from $1,9502015-08-16 HIGH 7.5 CVE-2013-7422 Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to ex… Perl after 10.10.4 Fix from $1,9502015-08-16 HIGH 9.3 CVE-2015-4496 Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metad… Firefox after 37.0.2 Fix from $1,9502015-08-16 MEDIUM 6.8 CVE-2015-4491EPSS 8% Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox… Ubuntu Linux after 2.31.4 Fix from $1,6002015-08-16 HIGH 9.3 CVE-2015-4480EPSS 6% Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 … Ubuntu Linux after 39.0.3 Fix from $1,9502015-08-16 HIGH 10.0 CVE-2015-4479EPSS 9% Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitr… Firefox after 39.0.3 Fix from $1,9502015-08-16 HIGH 9.3 CVE-2015-2470EPSS 27% Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows rem… Office No fix yet Fix from $1,9502015-08-15 HIGH 10.0 CVE-2015-5560EPSS 66% Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR… Flash Player after 18.0.0.209 Fix from $1,9502015-08-14 MEDIUM 5.0 CVE-2015-0851 XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which … Xmltooling after 1.5.4 Fix from $1,6002015-08-12 MEDIUM 6.8 CVE-2015-3228 Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of … Afpl Ghostscript after 9.15 Fix from $1,6002015-08-11 MEDIUM 5.0 CVE-2015-5962 Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics… Firefox Os after 2.1.0 Fix from $1,6002015-08-08 HIGH 7.5 CVE-2015-1279 Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow… Enterprise Linux Desktop Supplementary after 43.0.2357.134 Fix from $1,9502015-07-23 HIGH 7.5 CVE-2015-3279EPSS 7% Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or pos… Ubuntu Linux after 1.0.70 Fix from $1,9502015-07-14 HIGH 10.0 CVE-2015-3110EPSS 17% Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unsp… Photoshop Cc after 15.2.2 Fix from $1,9502015-06-24 MEDIUM 6.8 CVE-2015-4472 Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (application crash) … Libmspack after 0.4-3 Fix from $1,6002015-06-11 HIGH 10.0 CVE-2015-3104EPSS 6% Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux… Air after 17.0.0.172 Fix from $1,9502015-06-10 HIGH 7.5 CVE-2015-4022EPSS 21% Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP ser… Enterprise Linux Desktop after 5.4.40 Fix from $1,9502015-06-09 MEDIUM 5.0 CVE-2015-4021EPSS 21% The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first ch… Enterprise Linux Desktop after 5.4.40 Fix from $1,6002015-06-09 HIGH 7.8 CVE-2015-4003EPSS 6% The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attacke… Linux Kernel 3.4.109 / 3.10.81+ Fix from $1,9502015-06-07