CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-3874
Microsoft Internet Explorer 9 - Remote Code Execution via Memory Corruption
CVE-2013-3873
Microsoft Internet Explorer 10 - Remote Code Execution via Memory Corruption
CVE-2013-3871
Microsoft Internet Explorer 6-10 - Remote Code Execution via Crafted Web Site
CVE-2013-2808
Philips Xper Information Management - Heap-based Buffer Overflow via Crafted HTTP Request
CVE-2013-4986
PDFAX0722_IconCool.dll <7.22.1125.2121 - Buffer Overflow
CVE-2013-2223
GNU ZRTPCPP < 3.2.0 - Denial of Service and Information Disclosure via Crafted Packet
CVE-2013-2222
GNU ZRTPCPP < 3.2.0 - Stack-Based Buffer Overflow via Crafted ZRTP Hello Packet
CVE-2013-2221
GNU ZRTPCPP < 3.2.0 - Heap-Based Buffer Overflow via Large Packet
CVE-2013-5419
IBM AIX 6.1 and 7.1 - Local Privilege Escalation via mkque and mkquedev Buffer Overflow
CVE-2013-2964
IBM Tivoli Storage Manager <6.3.0.17 - Buffer Overflow
CVE-2013-0742
Corel PDF Fusion 1.11 - Buffer Overflow
CVE-2013-2920
Google Chrome < 30.0.1599.66 - Denial of Service via Relative URL Hostname Parsing
CVE-2013-2919
Google V8 <30.0.1599.66 - Memory Corruption
CVE-2013-2917
Google Chrome < 30.0.1599.66 - Denial of Service via ReverbConvolverStage Out-of-Bounds Read
CVE-2013-2907
Google Chrome < 30.0.1599.66 - Denial of Service via Out-of-Bounds Read
CVE-2013-2238
FreeSWITCH 1.2 - Buffer Overflow in switch_perform_substitution
CVE-2013-5651
libvirt < 1.1.2 - Denial of Service via Crafted Bitmap in virBitmapParse
CVE-2013-4297
libvirt < 1.1.2 - Authenticated Denial of Service via virFileNBDDeviceAssociate Uninitialized Pointer Dereference
CVE-2013-4296
libvirt < 0.10.2.8, 1.0.5.6, 1.1.2 - Authenticated DoS via RPC
CVE-2013-4239
libvirt 1.1.1 - Authenticated Denial of Service via virConnectListDefinedDomains API Function
CVE-2013-5959
Bluecoat Proxysgos < 5.3 - Memory Corruption
CVE-2013-4276
LittleCMS < 1.19 - Stack-Based Buffer Overflow via Crafted ICC Profile or TIFF Image
CVE-2013-4244
libtiff < 4.0.3 - Denial of Service and Possible Remote Code Execution via GIF LZW Decompression
CVE-2013-5933
Android 2.3.7 on Motorola Defy XT - Stack-Based Buffer Overflow via /dev/socket/init_runit
CVE-2013-4709
SEIL/x86 < 2.82, SEIL/X1/X2/B1 < 4.32, SEIL/Turbo/neu 2FE Plus < 2.16 - RCE via L2TP
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits