Browse CVEs

MEDIUM 5.5 CVE-2012-0038 Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of servi… Linux Kernel 3.1.9+ Fix from $1,6002012-05-17 MEDIUM 5.5 CVE-2011-4097 Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a deni… Linux Kernel 3.1.8+ Fix from $1,6002012-05-17 MEDIUM 6.8 CVE-2011-3065 Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspec… Chrome 18.0.1025.142+ Fix from $1,6002012-03-30 HIGH 8.8 CVE-2011-3045 Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and oth… Chrome 17.0.963.83+ Fix from $1,9502012-03-22 MEDIUM 6.8 CVE-2011-3026EPSS 73% Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspec… Chrome 6.0 / 10.7.5+ Fix from $1,6002012-02-16 MEDIUM 6.8 CVE-2011-3015 Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have… Chrome 17.0.963.56+ Fix from $1,6002012-02-16 HIGH 9.3 CVE-2011-4374 Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors. Reader after 10.1 Fix from $1,9502012-01-19 HIGH 7.5 CVE-2011-2829 Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspe… Chrome 13.0.782.215+ Fix from $1,9502011-08-29 MEDIUM 6.8 CVE-2011-0209 Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (applica… Quicktime 7.7.0 / 10.6.8+ Fix from $1,6002011-06-24 MEDIUM 6.8 CVE-2011-0211 Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (applica… Quicktime 7.7.0 / 10.6.8+ Fix from $1,6002011-06-24 HIGH 7.8 CVE-2011-1823 KEVEPSS 42% The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local use… Android 2.3.4+ Fix from $1,9502011-06-09 MEDIUM 6.8 CVE-2011-1178EPSS 5% Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow re… Gimp after 2.7.0 Fix from $1,6002011-06-06 HIGH 7.5 CVE-2011-1800 Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause… Chrome 11.0.696.71+ Fix from $1,9502011-05-16 MEDIUM 6.9 CVE-2011-1745 Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to ga… Linux Kernel 2.6.38.5+ Fix from $1,6002011-05-09 MEDIUM 6.8 CVE-2011-1437 Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other… Chrome 11.0.696.57+ Fix from $1,6002011-05-03 HIGH 8.8 CVE-2011-0663EPSS 26% Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to … Jscript Mitigation only Fix from $1,9502011-04-13 HIGH 7.5 CVE-2011-1121 Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact v… Chrome 5.0 / 5.0.6+ Fix from $1,9502011-03-01 MEDIUM 6.9 CVE-2010-4649 Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to ca… Linux Kernel 2.6.37+ Fix from $1,6002011-02-18 HIGH 7.2 CVE-2010-3865 Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and pos… Linux Kernel after 2.6.36 Fix from $1,9502011-01-11 MEDIUM 6.9 CVE-2010-4160 Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, i… Linux Kernel 2.6.36.2+ Fix from $1,6002011-01-07 MEDIUM 6.2 CVE-2010-4157 Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cau… Linux Kernel 2.6.36.1+ Fix from $1,6002010-12-10 CRITICAL 9.8 CVE-2010-4203 WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (m… Chrome 0.9.5 / 7.0.517.44+ Fix from $2,3002010-11-06 CRITICAL 9.8 CVE-2010-4202 Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecifi… Chrome 7.0.517.44+ Fix from $2,3002010-11-06 HIGH 7.8 CVE-2010-1883EPSS 23% Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, … Windows 2003 Server Mitigation only Fix from $1,9502010-10-13 CRITICAL 9.8 CVE-2010-3729 The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute a… Chrome 6.0.472.62+ Fix from $2,3002010-10-05 HIGH 7.2 CVE-2010-2478 Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users t… Linux Kernel 2.6.33.7+ Fix from $1,9502010-09-29 HIGH 7.2 CVE-2010-2959 Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21… Linux Kernel 2.6.27.53 / 2.6.32.21+ Fix from $1,9502010-09-08 HIGH 10.0 CVE-2010-3254 The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a de… Chrome 6.0.472.53+ Fix from $1,9502010-09-07 MEDIUM 6.8 CVE-2010-2500 Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (… Ubuntu Linux 2.4.0 / 10.6.5+ Fix from $1,6002010-08-19 HIGH 8.8 CVE-2010-2753EPSS 7% Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey … Firefox 2.0.6 / 3.0.6+ Fix from $1,9502010-07-30