CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,993 vulnerabilities with CWE-119
CVE-2017-14562 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted XPS File
CVSS 7.8
CVE-2017-14561 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted XPS File
CVSS 7.8
CVE-2017-14560 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted XPS File
CVSS 7.8
CVE-2017-14559 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted XPS File
CVSS 7.8
CVE-2017-14558 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted DJVU File
CVSS 7.8
CVE-2017-14557 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted .djvu File
CVSS 7.8
CVE-2017-14556 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted .djvu File
CVSS 7.8
CVE-2017-14555 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted .djvu File
CVSS 7.8
CVE-2017-14554 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted .djvu File
CVSS 7.8
CVE-2017-14553 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted .djvu File
CVSS 7.8
CVE-2017-14552 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted DJVU File
CVSS 7.8
CVE-2017-14551 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted .djvu File
CVSS 7.8
CVE-2017-14550 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted .djvu File
CVSS 7.8
CVE-2017-14549 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted .djvu File
CVSS 7.8
CVE-2017-14548 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted DJVU File
CVSS 7.8
CVE-2017-14547 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted MOBI File
CVSS 7.8
CVE-2017-14546 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted EPUB File
CVSS 7.8
CVE-2017-14545 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted EPUB File
CVSS 7.8
CVE-2017-14544 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted EPUB File
CVSS 7.8
CVE-2017-14543 HIGH
STDU Viewer 1.6.375 - Denial of Service via Crafted EPUB File
CVSS 7.8
CVE-2017-14542 HIGH
STDU Viewer 1.6.375 - Remote Code Execution via Crafted EPUB File
CVSS 7.8
CVE-2017-14541 HIGH
XnView Classic for Windows <2.40 - DoS
CVSS 7.8
CVE-2017-14540 HIGH
IrfanView 4.44 - Denial of Service via Crafted SVG File
CVSS 7.8
CVE-2017-14539 HIGH
IrfanView 4.44 - Denial of Service via Crafted SVG File
CVSS 7.8
CVE-2017-14538 HIGH
XnView Classic for Windows <2.40 - RCE/DoS
CVSS 7.8
Details
Vulnerabilities 13,993
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits