Numeric Errors

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows lo

• Локальное повышение привилегий

linux · linux kernel14 мая 2013 г.

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I all

• pre-auth RCE

google · android30 сент. 2015 г.

Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows re

• pre-auth RCE

google · android30 сент. 2015 г.

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1

• pre-auth RCE

google · android30 сент. 2015 г.

Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remot

• pre-auth RCE

google · android30 сент. 2015 г.

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code vi

• pre-auth RCE

adobe · flash player9 апр. 2008 г.

Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaM

• pre-auth RCE

mozilla · seamonkey30 июн. 2011 г.

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array len

• pre-auth RCE

samba · samba10 апр. 2012 г.

Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460

• pre-auth RCE

adobe · air13 мая 2015 г.

Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,

• pre-auth RCE

adobe · flash player13 авг. 2015 г.

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before

• pre-auth RCE

apache · http server28 июл. 2006 г.

Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to exec

• pre-auth RCE

adobe · acrobat19 окт. 2009 г.

Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote at

• Без аутентификации

clientsoftware · wincome mpd total18 нояб. 2008 г.

Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary co

• pre-auth RCE

radio toolbox · steamcast1 февр. 2008 г.

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appli

• pre-auth RCE

apple · quicktime15 авг. 2011 г.

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value

• pre-auth RCE

adobe · flash player11 июл. 2007 г.

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2

• pre-auth RCE

microsoft · digital image suite10 сент. 2008 г.

Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1

• pre-auth RCE

microsoft · windows 200014 авг. 2007 г.

Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka por

• pre-auth RCE

ibm · informix dynamic server5 мар. 2010 г.

IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of serv

• pre-auth RCE

ibm · domino21 апр. 2015 г.

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary co

• pre-auth RCE

microsoft · windows 200010 февр. 2010 г.

Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visi

• pre-auth RCE

microsoft · digital image suite10 сент. 2008 г.

Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold an

• pre-auth RCE

microsoft · windows 78 нояб. 2011 г.

Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint fil

• pre-auth RCE

microsoft · office powerpoint12 мая 2009 г.

Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Micr

• pre-auth RCE

microsoft · office10 июн. 2009 г.