CWE-125 · Out-of-bounds Read (page 94)
Page 94 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2011-0984 | | 2011-02-10 | Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecif… | |
CVE-2010-4577 | High | 7.5 | 2010-12-22 | The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, web… |
CVE-2009-2523 | | 2009-11-11 | The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string… | |
CVE-2007-3847 | | 2007-08-23 | The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of… | |
CVE-2006-6016 | Medium | 6.5 | 2006-11-21 | wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter. |
CVE-2006-5393 | Medium | 5.5 | 2006-10-18 | Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to re… |
CVE-2004-1940 | | 2004-12-31 | sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value th… | |
CVE-2004-0112 | | 2004-11-23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets du… | |
CVE-2004-0421 | | 2004-08-18 | The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that tri… | |
CVE-2004-0221 | | 2004-05-04 | isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large n… | |
CVE-2004-0184 | | 2004-05-04 | Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a… | |
CVE-2004-0183 | | 2004-05-04 | TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SP… | |
CVE-1999-0006 | Critical | 9.8 | 1998-07-14 | Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. |
CVE-1999-0029 | High | 8.4 | 1997-07-16 | root privileges via buffer overflow in ordist command on SGI IRIX systems. |
CVE-1999-0022 | High | 7.8 | 1996-07-03 | Local user gains root privileges via buffer overflow in rdist, via expstr() function. |