CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-5334
Adobe Shockwave Player <12.0.7.148 - Memory Corruption
CVE-2013-5333
Adobe Shockwave Player <12.0.7.148 - Memory Corruption
CVE-2013-5052
Microsoft Internet Explorer 7 - Memory Corruption
CVE-2013-5051
Microsoft Internet Explorer <11 - Code Injection
CVE-2013-5049
Microsoft Internet Explorer <10 - Code Injection
CVE-2013-5048
Microsoft Internet Explorer <11 - Code Injection
CVE-2013-5047
Microsoft Internet Explorer <11 - Code Injection
CVE-2013-3907
Microsoft Windows - Local Privilege Escalation via Port-Class Driver Double Fetch
CVE-2013-3878
Windows XP SP2-SP3 and Server 2003 SP2 - Local Privilege Escalation via LRPC Port Message
CVE-2013-3623
Supermicro Onboard IPMI CGI Vulnerability Scanner
CVE-2013-3622
Supermicro Intelligent Platform Management Firmware < 3.15 - Authenticated Buffer Overflow via SID Parameter
CVE-2013-5447
IBM Forms Viewer <4.0.0.3, <8.0.1.1 - Buffer Overflow
CVE-2013-4408
Samba 3.x < 3.6.22, 4.0.x < 4.0.13, 4.1.x < 4.1.3 - Remote Code Execution via DCE-RPC Packet Fragment Length
CVE-2013-7027
Linux Kernel < 3.11.7 - Denial of Service via Crafted Radiotap Header
CVE-2013-7024
FFmpeg < 2.1 - Denial of Service via JPEG2000 Component Calculation
CVE-2013-7023
FFmpeg < 2.1 - Denial of Service via Memory Allocation Error in ff_combine_frame
CVE-2013-7022
FFmpeg < 2.1 - Denial of Service via Crafted Go2Webinar Data in g2m_init_buffers
CVE-2013-7020
FFmpeg < 2.1 - Denial of Service via Crafted FFV1 Data
CVE-2013-7018
FFmpeg < 2.1 - Denial of Service via JPEG2000 Code-Block Dimension Handling
CVE-2013-7016
FFmpeg < 2.1 - Denial of Service via JPEG2000 Sample Separation Handling
CVE-2013-7012
FFmpeg < 2.1 - Denial of Service via JPEG2000 Image Offset Handling
CVE-2013-7011
FFmpeg < 2.1 - Denial of Service via Crafted FFV1 Data
CVE-2013-7009
FFmpeg < 2.1 - Denial of Service via Crafted Apple RPZA Data
CVE-2013-0852
FFmpeg < 1.1 - Out-of-Bounds Array Access via Crafted RLE Data
CVE-2013-0851
FFmpeg < 1.1 - Remote Code Execution via Crafted Electronic Arts Madcow Video Data
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits