CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-0878
FFmpeg < 1.1.3 - Out-of-Bounds Array Access in Targa Image Parser
CVE-2013-0877
FFmpeg < 1.1.3 - Out-of-Bounds Array Access via LucasArts Smush Data
CVE-2013-0874
FFmpeg < 1.1.3 - Out-of-Bounds Array Access in TIFF Image Processing
CVE-2013-0872
FFmpeg < 1.1.3 - Out-of-Bounds Array Access via Invalid Channel Layout
CVE-2013-4473
poppler < 0.24.2 - Stack-based Buffer Overflow via extractPages Function
CVE-2013-6699
Cisco Wireless LAN Controller - Denial of Service via Crafted CAPWAP Packet
CVE-2013-6693
Cisco IOS < 15.3(3)S - Denial of Service via MLDP Multicast Flow Handling
CVE-2013-6817
SAP Network Interface Router 7.30 - Remote Code Execution via Crafted NI Route Messages
CVE-2013-4466
GnuTLS 3.1.x-3.1.14 and 3.2.x-3.2.4 - Denial of Service via DANE Response with Excessive Entries
CVE-2013-4591
Linux kernel <3.7.2 - Buffer Overflow
CVE-2013-4588 HIGH
Linux kernel <2.6.33 - Privilege Escalation
CVSS 7.0
CVE-2013-6799
Apple Mac OS X 10.9 - Denial of Service via Hard Link to Directory
CVE-2013-6627
Google Chrome < 31.0.1650.48 - Denial of Service via HTTP Informational Status Code Processing
CVE-2013-6623
Google Chrome < 31.0.1650.48 - Denial of Service via SVG Layout Out-of-Bounds Read
CVE-2013-5330
Adobe Flash Player <11.7.700.252, 11.8.x, 11.9.x - RCE
CVE-2013-5329
Adobe Flash Player <11.7.700.252, 11.8.x, 11.9.x - RCE
CVE-2013-3917
Microsoft Internet Explorer 6-11 - Remote Code Execution via Crafted Web Site
CVE-2013-3916
Microsoft Internet Explorer 8-11 - Remote Code Execution via Memory Corruption
CVE-2013-3915
Microsoft Internet Explorer 6-11 - Remote Code Execution via Crafted Web Site
CVE-2013-3914
Microsoft Internet Explorer 9-11 - Remote Code Execution via Memory Corruption
CVE-2013-3912
Microsoft Internet Explorer 8-11 - Remote Code Execution via Memory Corruption
CVE-2013-3911
Microsoft Internet Explorer 9 and 10 - Remote Code Execution via Memory Corruption
CVE-2013-3910
Microsoft Internet Explorer 6-9 - Remote Code Execution via Memory Corruption
CVE-2013-1325
Microsoft Office <2007 SP3 - Buffer Overflow
CVE-2013-1324
Microsoft Office <2013 - Buffer Overflow
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits