CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-1248
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted ldat Atom
CVE-2014-1247
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted Dref Atom
CVE-2014-1246
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted ftab Atom
CVE-2014-1244
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted H.264 Movie File
CVE-2014-1243
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted Movie File Track List
CVE-2014-0498
Adobe Flash Player <11.7.700.269-12.0.0.70 - Buffer Overflow
CVE-2014-1253
Apple Boot Camp < 5.1 - Kernel Memory Corruption via Malformed PE Header
CVE-2014-0501
Adobe Shockwave Player <12.0.9.149 - Memory Corruption
CVE-2014-0500
Adobe Shockwave Player <12.0.9.149 - Memory Corruption
CVE-2014-0290
Microsoft Internet Explorer 11 - Memory Corruption
CVE-2014-0289
Microsoft Internet Explorer 11 - Memory Corruption
CVE-2014-0288
Microsoft Internet Explorer 9-11 - Memory Corruption
CVE-2014-0287
Microsoft Internet Explorer <11 - Code Injection
CVE-2014-0286
Microsoft Internet Explorer 6-11 - Code Injection
CVE-2014-0285
Microsoft Internet Explorer 6-11 - Code Injection
CVE-2014-0284
Microsoft Internet Explorer <10 - Code Injection
CVE-2014-0283
Microsoft Internet Explorer 9 - Memory Corruption
CVE-2014-0281
Microsoft Internet Explorer <11 - Code Injection
CVE-2014-0280
Microsoft Internet Explorer <9 - Code Injection
CVE-2014-0279
Microsoft Internet Explorer 8 - Code Injection
CVE-2014-0278
Microsoft Internet Explorer 8 - Code Injection
CVE-2014-0277
Microsoft Internet Explorer 8 - Code Injection
CVE-2014-0276
Microsoft Internet Explorer <9 - Code Injection
CVE-2014-0275
Microsoft Internet Explorer 6-11 - Code Injection
CVE-2014-0274
Microsoft Internet Explorer 9-11 - Code Injection
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits