Vulnerabilities > Numeric Errors

DATE CVE VULNERABILITY TITLE RISK
2006-12-21 CVE-2006-6676 Numeric Errors vulnerability in Eset Software Nod32 Antivirus 1.0.11/1.0.12/1.0.13
Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.
network
eset-software CWE-189
critical
9.3
2006-11-22 CVE-2006-6058 Numeric Errors vulnerability in Linux Kernel
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function.
local
high complexity
linux CWE-189
4.0
2006-11-16 CVE-2006-5940 Numeric Errors vulnerability in Grisoft AVG Antivirus
Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" and parsing of .EXE files.
network
low complexity
grisoft CWE-189
critical
10.0
2006-11-14 CVE-2006-3445 Numeric Errors vulnerability in Microsoft Windows 2000, Windows 2003 Server and Windows XP
Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
network
low complexity
microsoft CWE-189
7.5
2006-11-03 CVE-2006-5679 Numeric Errors vulnerability in Freebsd 6.1
Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function.
local
low complexity
freebsd CWE-189
4.6
2006-10-18 CVE-2006-4811 Numeric Errors vulnerability in multiple products
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
network
qt redhat CWE-189
6.8
2006-10-10 CVE-2006-3647 Numeric Errors vulnerability in Microsoft Office
Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
network
microsoft CWE-189
critical
9.3
2006-08-31 CVE-2006-4486 Numeric Errors vulnerability in PHP
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
network
high complexity
php CWE-189
2.6
2006-08-25 CVE-2006-3744 Numeric Errors vulnerability in Imagemagick
Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.
network
high complexity
imagemagick CWE-189
5.1
2006-08-03 CVE-2006-3464 Numeric Errors vulnerability in Libtiff
TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations".
network
low complexity
libtiff CWE-189
7.5