CWE-190 Archives - CVE Vulnerability

CVE-2008-4864

Sun, 26 Feb 2023 09:10:45 +0000

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.

The post CVE-2008-4864 appeared first on CVE Vulnerability.

CVE-2008-4019

Sun, 26 Feb 2023 09:10:20 +0000

Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office SharePoint Server 2007 Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file containing a formula within a cell, aka “Formula Parsing Vulnerability.”

The post CVE-2008-4019 appeared first on CVE Vulnerability.

CVE-2008-2826

Sun, 26 Feb 2023 09:09:43 +0000

Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure.

The post CVE-2008-2826 appeared first on CVE Vulnerability.

CVE-2008-2663

Sun, 26 Feb 2023 09:09:38 +0000

Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.

The post CVE-2008-2663 appeared first on CVE Vulnerability.

CVE-2008-1446

Sun, 26 Feb 2023 09:09:01 +0000

Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka “Integer Overflow in IPP Service Vulnerability.”

The post CVE-2008-1446 appeared first on CVE Vulnerability.

CVE-2008-1374

Sun, 26 Feb 2023 09:09:00 +0000

Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.

The post CVE-2008-1374 appeared first on CVE Vulnerability.

CVE-2007-3387

Sun, 26 Feb 2023 09:06:43 +0000

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

The post CVE-2007-3387 appeared first on CVE Vulnerability.

CVE-2007-2949

Sun, 26 Feb 2023 09:06:31 +0000

Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.

The post CVE-2007-2949 appeared first on CVE Vulnerability.

CVE-2007-2834

Sun, 26 Feb 2023 09:06:28 +0000

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

The post CVE-2007-2834 appeared first on CVE Vulnerability.

CVE-2007-2223

Sun, 26 Feb 2023 09:06:12 +0000

Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.

The post CVE-2007-2223 appeared first on CVE Vulnerability.