CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-0595
Novell Open Enterprise Server - Local Privilege Escalation via nwrights Array Mismanagement
CVE-2014-0469
Debian xbuffy <3.3.bl.3.dfsg-9 - Buffer Overflow
CVE-2014-3000
FreeBSD 8.3-8.4 9.1-9.2 10.0 - Denial of Service via TCP Reassembly Queue Handling
CVE-2014-2172
Cisco TelePresence <6.0 - Privilege Escalation
CVE-2014-2171
Cisco TelePresence TC Software <6.0.1-6.0.2 - RCE
CVE-2014-2168
Cisco TelePresence TC and TE Software - Remote Code Execution via Crafted DNS Response
CVE-2014-1443
Core FTP Server 1.2 - Authenticated Information Disclosure via USER Command
CVE-2014-1528
Canonical Ubuntu Linux - Memory Corruption
CVE-2014-0088
nginx 1.5.10 - Remote Code Execution via SPDY Request Handling
CVE-2014-0515
Adobe Flash Player Shader Buffer Overflow
CVE-2014-1766
Microsoft Internet Explorer <11 - Memory Corruption
CVE-2014-2994
Acunetix Web Vulnerability Scanner 8 build 20120704 - Stack-Based Buffer Overflow via IMG Element URL
CVE-2014-1647
Symantec PGP Desktop <10.3.2 MP1 - DoS
CVE-2014-1646
Symantec PGP Desktop <10.3.2 MP1 - DoS
CVE-2014-1319
macOS 10.9.x-10.9.2 - Remote Code Execution via Crafted JPEG Image
CVE-2014-2892
libmms < 0.6.4 - Remote Code Execution via Long MMSH Server Response Line
CVE-2014-0355
ZyXEL Wireless N300 NetUSB NBG-419N <1.00(BFQ.6)C0 - Buffer Overflow
CVE-2014-0159
OpenAFS 1.4.8-1.6.7 - Denial of Service via GetStatistics64 RPC
CVE-2014-2389
BlackBerry Z10 <10.1.0.2312 - Buffer Overflow
CVE-2014-0787
WellinTech KingSCADA < 3.1.2.13 - Remote Code Execution via Crafted Packet
CVE-2014-0770
Advantech WebAccess < 7.1 - Remote Code Execution via UserName Parameter Buffer Overflow
CVE-2014-0768
Advantech WebAccess < 7.1 - Remote Code Execution via AccessCode2 Argument Buffer Overflow
CVE-2014-0767
Advantech WebAccess < 7.1 - Remote Code Execution via AccessCode Argument Buffer Overflow
CVE-2014-0766
Advantech WebAccess < 7.1 - Remote Code Execution via NodeName2 Buffer Overflow
CVE-2014-0765
Advantech WebAccess < 7.1 - Remote Code Execution via GotoCmd Argument Buffer Overflow
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits