CWE-681 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-681/ Sun, 26 Feb 2023 09:09:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-681 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-681/ 32 32 CVE-2008-3282 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3282/ Sun, 26 Feb 2023 09:09:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3282/ Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a “numeric truncation error,” a different vulnerability than CVE-2008-2152.

The post CVE-2008-3282 appeared first on CVE Vulnerability.

]]> Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a “numeric truncation error,” a different vulnerability than CVE-2008-2152.

The post CVE-2008-3282 appeared first on CVE Vulnerability.

]]> CVE-2008-1721 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1721/ Sun, 26 Feb 2023 09:09:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1721/ Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

The post CVE-2008-1721 appeared first on CVE Vulnerability.

]]> Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

The post CVE-2008-1721 appeared first on CVE Vulnerability.

]]> CVE-2007-4988 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4988/ Sun, 26 Feb 2023 09:07:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4988/ Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

The post CVE-2007-4988 appeared first on CVE Vulnerability.

]]> Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

The post CVE-2007-4988 appeared first on CVE Vulnerability.

]]> CVE-2018-8786 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8786/ Sun, 26 Feb 2023 06:51:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8786/ FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.

The post CVE-2018-8786 appeared first on CVE Vulnerability.

]]> FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.

The post CVE-2018-8786 appeared first on CVE Vulnerability.

]]> CVE-2018-5711 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5711/ Sun, 26 Feb 2023 06:50:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5711/ gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related […]

The post CVE-2018-5711 appeared first on CVE Vulnerability.

]]> gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.

The post CVE-2018-5711 appeared first on CVE Vulnerability.

]]> CVE-2018-5251 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5251/ Sun, 26 Feb 2023 06:50:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5251/ In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.

The post CVE-2018-5251 appeared first on CVE Vulnerability.

]]> In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.

The post CVE-2018-5251 appeared first on CVE Vulnerability.

]]> CVE-2018-3999 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3999/ Sun, 26 Feb 2023 06:49:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3999/ An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a copying operation. Due to the length underflow, the application […]

The post CVE-2018-3999 appeared first on CVE Vulnerability.

]]> An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a copying operation. Due to the length underflow, the application will then write outside the bounds of a stack buffer, resulting in a buffer overflow. An attacker must convince a victim to open a document in order to trigger this vulnerability.

The post CVE-2018-3999 appeared first on CVE Vulnerability.

]]> CVE-2018-1000224 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1000224/ Sun, 26 Feb 2023 06:44:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1000224/ Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in (De)Serialization functions (core/io/marshalls.cpp) that can result in DoS (packet of death), possible leak of uninitialized memory. This attack appear to be exploitable via A malformed packet […]

The post CVE-2018-1000224 appeared first on CVE Vulnerability.

]]> Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in (De)Serialization functions (core/io/marshalls.cpp) that can result in DoS (packet of death), possible leak of uninitialized memory. This attack appear to be exploitable via A malformed packet is received over the network by a Godot application that uses built-in serialization (e.g. game server, or game client). Could be triggered by multiplayer opponent. This vulnerability appears to have been fixed in 2.1.5, 3.0.6, master branch after commit feaf03421dda0213382b51aff07bd5a96b29487b.

The post CVE-2018-1000224 appeared first on CVE Vulnerability.

]]> CVE-2020-6582 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6582/ Sun, 26 Feb 2023 06:42:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6582/ Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call.

The post CVE-2020-6582 appeared first on CVE Vulnerability.

]]> Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call.

The post CVE-2020-6582 appeared first on CVE Vulnerability.

]]> CVE-2020-4032 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4032/ Sun, 26 Feb 2023 06:41:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4032/ In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.

The post CVE-2020-4032 appeared first on CVE Vulnerability.

]]> In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.

The post CVE-2020-4032 appeared first on CVE Vulnerability.

]]>