Browse CVEs

HIGH 7.3 CVE-2014-4608EPSS 5% Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel befor… Linux Kernel 3.15.2+ Fix from $1,9502014-07-03 MEDIUM 6.5 CVE-2013-7353 Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause … Libpng after 1.5.13 Fix from $1,6002014-05-06 MEDIUM 6.5 CVE-2013-7354 Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png… Libpng after 1.5.13 Fix from $1,6002014-05-06 HIGH 7.5 CVE-2014-1736 Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows … Chrome 34.0.1847.131 / 34.0.1847.132+ Fix from $1,9502014-05-06 MEDIUM 5.8 CVE-2011-4093 Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as othe… Solaris after 1.3.13 Fix from $1,6002014-02-10 MEDIUM 6.8 CVE-2013-1913 Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.… Enterprise Linux after 2.6.9 Fix from $1,6002013-12-12 HIGH 7.5 CVE-2013-5619 Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow r… Firefox 2.23 / 26.0+ Fix from $1,9502013-12-11 MEDIUM 6.9 CVE-2013-5058 Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 … Windows 7 Patch available Fix from $1,6002013-12-11 HIGH 9.3 CVE-2013-3940EPSS 34% Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Serv… Windows 7 Patch available Fix from $1,9502013-11-13 MEDIUM 5.0 CVE-2013-6114 Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service (application cra… Motion No fix yet Fix from $1,6002013-11-04 HIGH 7.5 CVE-2013-4391EPSS 5% Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash… Debian Linux 190+ Fix from $1,9502013-10-28 CRITICAL 9.8 CVE-2013-2729 KEVEPSS 67% Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code… Enterprise Linux Desktop 9.5.5 / 10.1.7+ Fix from $2,3002013-05-16 HIGH 9.3 CVE-2013-1317EPSS 21% Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an impr… Publisher Mitigation only Fix from $1,9502013-05-15 HIGH 7.8 CVE-2013-2596 KEV Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.… Linux Kernel 3.0.75 / 3.2.45+ Fix from $1,9502013-04-13 HIGH 10.0 CVE-2013-2555EPSS 8% Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11… Enterprise Linux Desktop 10.3.183.75+ Fix from $1,9502013-03-11 MEDIUM 5.0 CVE-2013-0899 Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google C… Chrome 1.0.2 / 25.0.1364.97+ Fix from $1,6002013-02-23 HIGH 7.5 CVE-2013-0891 Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a d… Chrome 25.0.1364.97 / 25.0.1364.99+ Fix from $1,9502013-02-23 CRITICAL 9.8 CVE-2013-1591 Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent … Enterprise Virtualization 15.4+ Fix from $2,3002013-01-31 HIGH 9.3 CVE-2013-0750EPSS 6% Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird… Firefox 2.15 / 10.0.12+ Fix from $1,9502013-01-13 HIGH 10.0 CVE-2012-5143 Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact … Chrome after 23.0.1271.96 Fix from $1,9502012-12-12 HIGH 10.0 CVE-2012-5835EPSS 9% Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.… Firefox 2.14 / 10.0.11+ Fix from $1,9502012-11-21 HIGH 8.8 CVE-2012-5054 KEVEPSS 21% Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbit… Flash Player 11.4.402.265+ Fix from $1,9502012-09-24 MEDIUM 6.8 CVE-2012-3481EPSS 5% Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote… Gimp after 2.8.0 Fix from $1,6002012-08-25 MEDIUM 6.8 CVE-2012-3402 Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of s… Gimp after 2.2.13 Fix from $1,6002012-08-25 MEDIUM 6.8 CVE-2012-4025 Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary co… Squashfs after 4.2 Fix from $1,6002012-07-19 HIGH 8.4 CVE-2012-1867 Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se… Windows 2003 Server Mitigation only Fix from $1,9502012-06-12 HIGH 9.3 CVE-2012-2036 Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11… Enterprise Linux Desktop after 11.2.202.235 Fix from $1,9502012-06-09 HIGH 7.5 CVE-2012-1610 Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of serv… Debian Linux 6.7.6-4+ Fix from $1,9502012-06-05 HIGH 7.8 CVE-2012-1185EPSS 30% Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial… Debian Linux after 6.7.5 Fix from $1,9502012-06-05 HIGH 7.8 CVE-2012-0044 Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux ke… Linux Kernel 3.0.13 / 3.1.5+ Fix from $1,9502012-05-17