CWE-191 Archives - CVE Vulnerability

CVE-2007-0063

Sun, 26 Feb 2023 09:05:20 +0000

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.

The post CVE-2007-0063 appeared first on CVE Vulnerability.

CVE-2018-7569

Sun, 26 Feb 2023 06:51:05 +0000

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.

The post CVE-2018-7569 appeared first on CVE Vulnerability.

CVE-2018-6612

Sun, 26 Feb 2023 06:50:47 +0000

An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact.

The post CVE-2018-6612 appeared first on CVE Vulnerability.

CVE-2018-5850

Sun, 26 Feb 2023 06:50:29 +0000

In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

The post CVE-2018-5850 appeared first on CVE Vulnerability.

CVE-2018-5865

Sun, 26 Feb 2023 06:50:29 +0000

While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, an integer underflow and/or buffer over-read can occur.

The post CVE-2018-5865 appeared first on CVE Vulnerability.

CVE-2018-3999

Sun, 26 Feb 2023 06:49:54 +0000

An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a copying operation. Due to the length underflow, the application will then write outside the bounds of a stack buffer, resulting in a buffer overflow. An attacker must convince a victim to open a document in order to trigger this vulnerability.

The post CVE-2018-3999 appeared first on CVE Vulnerability.

CVE-2018-4011

Sun, 26 Feb 2023 06:49:54 +0000

An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. When parsing SRV records in an mDNS packet, the “RDLENGTH” value is handled incorrectly, leading to an out-of-bounds access that crashes the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

The post CVE-2018-4011 appeared first on CVE Vulnerability.

CVE-2018-3926

Sun, 26 Feb 2023 06:49:52 +0000

An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 – Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite loop, which eventually causes the process to crash. An attacker can send an HTTP request to trigger this vulnerability.

The post CVE-2018-3926 appeared first on CVE Vulnerability.

CVE-2018-21065

Sun, 26 Feb 2023 06:48:51 +0000

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There is an integer underflow in eCryptFS because of a missing size check. The Samsung ID is SVE-2017-11855 (August 2018).

The post CVE-2018-21065 appeared first on CVE Vulnerability.

CVE-2018-20989

Sun, 26 Feb 2023 06:48:49 +0000

An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic.

The post CVE-2018-20989 appeared first on CVE Vulnerability.