CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-0004
udisks < 1.0.5 and 2.x < 2.1.3 - Stack-based Buffer Overflow via Long Mount Point
CVE-2014-2309
Linux Kernel < 3.13.6 - Denial of Service via ICMPv6 Router Advertisement Flood
CVE-2014-2299
Wireshark <1.8.13, <1.10.6 - Buffer Overflow
CVE-2014-2282
Wireshark 1.10.x < 1.10.6 - Denial of Service in M3UA Dissector
CVE-2014-2206
GetGo Download Manager <4.9.0.1982 - Buffer Overflow
CVE-2014-2013
MuPDF < 1.3 - Remote Code Execution via XPS ContextColor Path Attribute
CVE-2014-2098
FFmpeg < 2.1.4 - Memory Corruption via Crafted WMA Data
CVE-2014-2263
FFmpeg < 2.1 - Out-of-Bounds Write in MPEG2 Transport Stream Muxer
CVE-2014-2262
Base SAS 9.2 TS2M3, 9.3 TS1M1-TS1M2, 9.4 TS1M0 - Buffer Overflow via Crafted SAS Program
CVE-2014-1912
Python <2.7.7, <3.3.4, <3.4rc1 - Buffer Overflow
CVE-2014-1878
Icinga < 1.8.5 and Nagios < 4.0.3 - Stack-based Buffer Overflow via Long Message to cmd.cgi
CVE-2014-0774
Schneider Electric OPC Factory Server 3.35 - Local Privilege Escalation via Malformed Config
CVE-2014-0069
Linux kernel <3.13.5 - Info Disclosure/DoS
CVE-2014-1270
Safari < 6.1.2 and 7.x < 7.0.2 - Remote Code Execution via Memory Corruption
CVE-2014-1269
Safari < 6.1.2 and 7.x < 7.0.2 - Remote Code Execution via Memory Corruption
CVE-2014-1268
Apple Safari < 6.1.2 and 7.x < 7.0.2 - Remote Code Execution via Memory Corruption
CVE-2014-1262
Apple OS X < 10.9.2 - App Sandbox Bypass via ATS Mach Message Memory Corruption
CVE-2014-1260
macOS < 10.8.5 - Remote Code Execution via Crafted Microsoft Office Document
CVE-2014-1259
macOS < 10.9.2 - Buffer Overflow in File Bookmark via Crafted Filename
CVE-2014-1258
macOS < 10.9.2 - Remote Code Execution via Crafted Image in CoreAnimation
CVE-2014-1256
macOS < 10.9.2 - Buffer Overflow in Apple Type Services via Mach Messages
CVE-2014-1254
Apple OS X < 10.9.2 - Remote Code Execution via Crafted Type 1 Font
CVE-2014-1251
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted Clef Atom
CVE-2014-1250
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted ttfo Element
CVE-2014-1249
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted PSD Image
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits