CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-1376
Adobe Acrobat and Reader 9.x-10.x - Buffer Overflow
CVE-2013-6749
IBM Lotus Quickr for Domino 8.5.1 - Buffer Overflow in ActiveX Control
CVE-2013-6748
IBM Lotus Quickr for Domino 8.5.1 - Remote Code Execution via ActiveX Control Buffer Overflow
CVE-2013-7296
Poppler < 0.24.5 - Denial of Service via JBIG2Stream Format String
CVE-2013-7184
Gretech GOM Media Player <2.2.56.5158 - Memory Corruption
CVE-2013-6933
Live Networks Live555 Streaming Media <=2013.11.25 - DoS and RCE via RTSP Parsing
CVE-2013-6343
ASUS RT-N56U and RT-AC66U Firmware 3.0.0.4.374_979 - Remote Code Execution via apps_name or apps_flag Parameter
CVE-2013-4231
libtiff < 4.0.3 - Denial of Service via Crafted GIF or TIFF Image
CVE-2013-3483
ERDAS ER Viewer < 13.0.1.1301 - Stack-Based Buffer Overflow via Crafted ERS File
CVE-2013-3482
ERDAS ER Viewer < 13.0.1.1301 - Stack-Based Buffer Overflow via Long String in ERS File
CVE-2013-2139
Fedora < 1.4.5 - Memory Corruption
CVE-2013-7205
Nagios Core <4.0.2 - Info Disclosure
CVE-2013-7106
Icinga <1.8.5, <1.9.4, <1.10.2 - Buffer Overflow
CVE-2013-7291
memcached < 1.4.17 - Denial of Service via Unbounded Key Print in Verbose Mode
CVE-2013-7290
memcached < 1.4.17 - Denial of Service via Verbose Mode Key Deletion
CVE-2013-0179
memcached < 1.4.17 - Denial of Service via Verbose Mode Key Deletion
CVE-2013-6462
libXfont 1.1-1.4.6 - Stack-Based Buffer Overflow in BDF Font Character Name
CVE-2013-5359
Google Picasa <3.9.0 - Buffer Overflow
CVE-2013-5358
Google Picasa <3.9.0 - Memory Corruption
CVE-2013-5357
Google Picasa - Remote Code Execution via Long TIFF Tag Heap Overflow
CVE-2013-5349
Google Picasa - Remote Code Execution via Crafted JPEG Tag Integer Underflow
CVE-2013-7280
HansoTools Hanso Player <2.5.0 - Buffer Overflow
CVE-2013-7260
RealNetworks RealPlayer <17.0.4.61 - Windows/Mac - Buffer Overflow
CVE-2013-6932
IrfanView < 4.37 - Buffer Overflow via Thumbnail Tooltips in Thumbnails Window
CVE-2013-4553
Xen 3.4.x-4.3.x - Denial of Service via XEN_DOMCTL_getmemlist Hypercall Deadlock
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits