CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-5365
Autodesk SketchBook <6.25 - Buffer Overflow
CVE-2013-3481
Artweaver Free and Plus < 3.1.5 - Remote Code Execution via Crafted JPG Image
CVE-2013-0732
Nuance PDF Reader <8.1 - Buffer Overflow
CVE-2013-1605
MayGion IP Camera Firmware < 2013.04.22 (05.53) - Remote Code Execution via Long Filename
CVE-2013-6474
cups-filters < 1.0.46 - Remote Code Execution via Crafted PDF File
CVE-2013-6473
Canonical Ubuntu Linux - Memory Corruption
CVE-2013-3928
Chasys Draw IES < 4.11.02 - Remote Code Execution via Crafted BMP File
CVE-2013-6665
Google Chrome < 33.0.1750.146 - Heap-Based Buffer Overflow in ResourceProvider
CVE-2013-4981
AVTECH AVN801 DVR <1017-1003-1009-1003 - Buffer Overflow
CVE-2013-4980
AVTECH AVN801 DVR <1017-1003-1009-1003 - Buffer Overflow
CVE-2013-4977
Hikvision DS-2CD7153-E <4.1.0 b130111 - Buffer Overflow
CVE-2013-3260
INMATRIX Zoom Player <8.7 beta 11 - Buffer Overflow
CVE-2013-3259
INMATRIX Zoom Player <8.7 beta 11 - Buffer Overflow
CVE-2013-5351
IrfanView < 4.37 - Remote Code Execution via GIF LZW Code Stream
CVE-2013-1980
extended_module_player < 4.0.4 - Buffer Overflow in MASI File Parser
CVE-2013-2962
IBM WebSphere Transformation Extender <8.4.0.4 - Buffer Overflow
CVE-2013-6393
LibYAML < 0.1.5 - Heap-Based Buffer Overflow via Crafted YAML Tags
CVE-2013-6490
Pidgin < 2.10.8 - Buffer Overflow via SIMPLE Protocol Negative Content-Length Header
CVE-2013-6481
Pidgin < 2.10.8 - Denial of Service via Yahoo P2P Message Length Field
CVE-2013-6485
Pidgin < 2.10.8 - Buffer Overflow via Chunked Transfer-Coding Chunk-Size Field
CVE-2013-4978
AloahaPDFViewer <5.0.0.7 - Buffer Overflow
CVE-2013-2691
jetAudio 8.0.17 - Remote Code Execution via Crafted MPEG2-TS Video File
CVE-2013-4738
codeaurora android-msm - Stack-Based Buffer Overflow via VIDIOC_MSM_VPE_DEQUEUE_STREAM_BUFF_INFO ioctl
CVE-2013-4979
EPS Viewer < 3.2 - Remote Code Execution via Crafted EPS File
CVE-2013-7246
DaumGame ActiveX Control 1.1.0.4 and 1.1.0.5 - Buffer Overflow via IconCreate Method
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits