Vulnerability index

Browse CVEs

3,273 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Integer OverflowCWE-190 × clear
Linux Kernel MEDIUM 5.5
CVE-2012-0038

Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of servi…

Fix: 3.1.9+
Fix from $1,600 2012-05-17
Linux Kernel MEDIUM 5.5
CVE-2011-4097

Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a deni…

Fix: 3.1.8+
Fix from $1,600 2012-05-17
Chrome MEDIUM 6.8
CVE-2011-3065

Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspec…

Fix: 18.0.1025.142+
Fix from $1,600 2012-03-30
Chrome HIGH 8.8
CVE-2011-3045

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and oth…

Fix: 17.0.963.83+
Fix from $1,950 2012-03-22
Chrome MEDIUM 6.8
CVE-2011-3026EPSS 73%

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspec…

Fix: 6.0 / 10.7.5+
Fix from $1,600 2012-02-16
Chrome MEDIUM 6.8
CVE-2011-3015

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have…

Fix: 17.0.963.56+
Fix from $1,600 2012-02-16
Reader HIGH 9.3
CVE-2011-4374

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Fix: after 10.1
Fix from $1,950 2012-01-19
Chrome HIGH 7.5
CVE-2011-2829

Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspe…

Fix: 13.0.782.215+
Fix from $1,950 2011-08-29
Quicktime MEDIUM 6.8
CVE-2011-0209

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (applica…

Fix: 7.7.0 / 10.6.8+
Fix from $1,600 2011-06-24
Quicktime MEDIUM 6.8
CVE-2011-0211

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (applica…

Fix: 7.7.0 / 10.6.8+
Fix from $1,600 2011-06-24
Android HIGH 7.8
CVE-2011-1823 KEVEPSS 42%

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local use…

Fix: 2.3.4+
Fix from $1,950 2011-06-09
Gimp MEDIUM 6.8
CVE-2011-1178EPSS 5%

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow re…

Fix: after 2.7.0
Fix from $1,600 2011-06-06
Chrome HIGH 7.5
CVE-2011-1800

Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause…

Fix: 11.0.696.71+
Fix from $1,950 2011-05-16
Linux Kernel MEDIUM 6.9
CVE-2011-1745

Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to ga…

Fix: 2.6.38.5+
Fix from $1,600 2011-05-09
Chrome MEDIUM 6.8
CVE-2011-1437

Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other…

Fix: 11.0.696.57+
Fix from $1,600 2011-05-03
Jscript HIGH 8.8
CVE-2011-0663EPSS 26%

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to …

Mitigation only
Fix from $1,950 2011-04-13
Chrome HIGH 7.5
CVE-2011-1121

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact v…

Fix: 5.0 / 5.0.6+
Fix from $1,950 2011-03-01
Linux Kernel MEDIUM 6.9
CVE-2010-4649

Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to ca…

Fix: 2.6.37+
Fix from $1,600 2011-02-18
Linux Kernel HIGH 7.2
CVE-2010-3865

Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and pos…

Fix: after 2.6.36
Fix from $1,950 2011-01-11
Linux Kernel MEDIUM 6.9
CVE-2010-4160

Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, i…

Fix: 2.6.36.2+
Fix from $1,600 2011-01-07
Linux Kernel MEDIUM 6.2
CVE-2010-4157

Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cau…

Fix: 2.6.36.1+
Fix from $1,600 2010-12-10
Chrome CRITICAL 9.8
CVE-2010-4203

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (m…

Fix: 0.9.5 / 7.0.517.44+
Fix from $2,300 2010-11-06
Chrome CRITICAL 9.8
CVE-2010-4202

Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecifi…

Fix: 7.0.517.44+
Fix from $2,300 2010-11-06
Windows 2003 Server HIGH 7.8
CVE-2010-1883EPSS 23%

Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, …

Mitigation only
Fix from $1,950 2010-10-13
Chrome CRITICAL 9.8
CVE-2010-3729

The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute a…

Fix: 6.0.472.62+
Fix from $2,300 2010-10-05
Linux Kernel HIGH 7.2
CVE-2010-2478

Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users t…

Fix: 2.6.33.7+
Fix from $1,950 2010-09-29
Linux Kernel HIGH 7.2
CVE-2010-2959

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21…

Fix: 2.6.27.53 / 2.6.32.21+
Fix from $1,950 2010-09-08
Chrome HIGH 10.0
CVE-2010-3254

The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a de…

Fix: 6.0.472.53+
Fix from $1,950 2010-09-07
Ubuntu Linux MEDIUM 6.8
CVE-2010-2500

Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (…

Fix: 2.4.0 / 10.6.5+
Fix from $1,600 2010-08-19
Firefox HIGH 8.8
CVE-2010-2753EPSS 7%

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey …

Fix: 2.0.6 / 3.0.6+
Fix from $1,950 2010-07-30