CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-5170
Apple Mac OS X < 10.9 - Remote Code Execution via Crafted PDF Document
CVE-2013-2236
Quagga < 0.99.22.2 - Stack-based Buffer Overflow in OSPFD API LSA Change Notification
CVE-2013-6027
D-Link DIR-100 - Authenticated Stack-Based Buffer Overflow via Ping Diagnostic Parameter
CVE-2013-6021
WatchGuard Fireware < 11.8 - Remote Code Execution via Long Session ID Cookie
CVE-2013-6013
Juniper Junos Remote Code Execution via Crafted Telnet Message
CVE-2013-4370
Xen 4.2.x and 4.3.x - Use-After-Free in OCaml xc_vcpu_getaffinity Binding
CVE-2013-2254
Apache Sling Servlets Post 2.2.0-2.3.0 - Denial of Service via deepGetOrCreateNode Infinite Loop
CVE-2013-5515
Cisco ASA <8.2(5.44)/8.3.x<8.3(2.39)/8.4.x<8.4(5.7)/8.6.x<8.6(1.12)/9.0.x<9.0(2.6)/9.1.x<9.1(1.7) DoS via HTTPS
CVE-2013-5513
Cisco ASA Software <=9.1(1.8) DoS via Crafted TCP DNS Packets
CVE-2013-3415
Cisco ASA 8.4.x < 8.4(3) & 8.6.x < 8.6(1.3) DoS via AnyConnect SSL VPN Disconnect
CVE-2013-6079
MostGear Soft Easy LAN Folder Share 3.2.0.100 - Buffer Overflow via Long Registration Code or License Registry Key
CVE-2013-4388
VLC Media Player < 2.0.8 - Buffer Overflow in MP4A Packetizer
CVE-2013-4387
Linux Kernel < 3.11.4 - Denial of Service via UDP Fragmentation Offload Processing
CVE-2013-4237
glibc < 2.18 - Denial of Service and Possible Remote Code Execution via Crafted NTFS or CIFS Image
CVE-2013-5327
Adobe RoboHelp 10 - Memory Corruption
CVE-2013-4385
CHICKEN < 4.8.0.4 - Buffer Overflow in read-string! Procedure
CVE-2013-4256
Canonical Ubuntu Linux - Memory Corruption
CVE-2013-3892
Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 - Remote Code Execution via Crafted Office Document
CVE-2013-3891
Microsoft Word 2003 SP3 - Remote Code Execution via Crafted Office Document
CVE-2013-3890
Microsoft Excel 2007 SP3 RCE via Crafted Office Document
CVE-2013-3889
Microsoft Excel 2007 SP3, 2010 SP1-SP2, 2013, 2013 RT - Remote Code Execution via Crafted Office Document
CVE-2013-3886
Microsoft Internet Explorer 9 and 10 - Remote Code Execution via Memory Corruption
CVE-2013-3885
Microsoft Internet Explorer 10 - Remote Code Execution via Memory Corruption
CVE-2013-3882
Microsoft Internet Explorer 10 - Remote Code Execution via Memory Corruption
CVE-2013-3875
Microsoft Internet Explorer 8 and 9 - Remote Code Execution via Memory Corruption
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits