Vulnerabilities > Integer Overflow or Wraparound

DATE CVE VULNERABILITY TITLE RISK
2017-11-15 CVE-2017-16832 Integer Overflow or Wraparound vulnerability in GNU Binutils 2.29.1
The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.
local
low complexity
gnu CWE-190
7.8
2017-11-15 CVE-2017-16831 Integer Overflow or Wraparound vulnerability in GNU Binutils 2.29.1
coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.
local
low complexity
gnu CWE-190
7.8
2017-11-15 CVE-2017-16830 Integer Overflow or Wraparound vulnerability in GNU Binutils 2.29.1
The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.
local
low complexity
gnu CWE-190
7.8
2017-11-15 CVE-2017-16828 Integer Overflow or Wraparound vulnerability in GNU Binutils 2.29.1
The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.
local
low complexity
gnu CWE-190
7.8
2017-11-12 CVE-2017-16797 Integer Overflow or Wraparound vulnerability in Swftools 0.9.2
In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and application crash) or possibly have unspecified other impact via a crafted PNG file.
network
swftools CWE-190
6.8
2017-11-08 CVE-2017-16663 Integer Overflow or Wraparound vulnerability in Sam2P Project Sam2P 0.49.4
In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because "width * height" multiplications occur unsafely.
4.3
2017-11-07 CVE-2017-2921 Integer Overflow or Wraparound vulnerability in Cesanta Mongoose 6.8
An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.
network
low complexity
cesanta CWE-190
7.5
2017-11-07 CVE-2017-2892 Integer Overflow or Wraparound vulnerability in Cesanta Mongoose 6.8
An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.
network
low complexity
cesanta CWE-190
7.5
2017-11-01 CVE-2017-1000121 Integer Overflow or Wraparound vulnerability in Webkitgtk Webkitgtk+
The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process.
network
low complexity
webkitgtk CWE-190
critical
9.8
2017-10-31 CVE-2017-10954 Integer Overflow or Wraparound vulnerability in Bitdefender Internet Security 2018
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2018 prior to build 7.72918.
network
bitdefender CWE-190
critical
9.3