CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-1721
SeaMonkey < 2.20 - Remote Code Execution via Integer Overflow in drawLineLoop
CVE-2013-1720
Firefox < 24.0 - Remote Code Execution via HTML5 Tree Builder Insertion Mode Stack
CVE-2013-1719
Thunderbird < 17.0.9 - Remote Code Execution via Memory Corruption
CVE-2013-1718
Thunderbird ESR < 17.0.9 - Remote Code Execution via Memory Corruption
CVE-2013-4234
libmodplug < 0.8.8.4 - Heap-Based Buffer Overflow in ABC MIDI Parsing
CVE-2013-4179
OpenStack Compute (Nova) < 2013.2 - Denial of Service via XML Entity Expansion
CVE-2013-1026
Mac OS X < 10.8.5 - Remote Code Execution via Crafted JPEG2000 Data in PDF
CVE-2013-1025
iPhone OS < 6.1.4 - Remote Code Execution via Crafted JBIG2 Data in PDF
CVE-2013-5720
Wireshark 1.8.x < 1.8.10 and 1.10.x < 1.10.2 - Denial of Service via RTPS Dissector Buffer Overflow
CVE-2013-2899
Linux Kernel < 3.11 - Denial of Service via HID PicoLCD Driver
CVE-2013-2894
Linux Kernel < 3.11 - Denial of Service via HID Lenovo ThinkPad Keyboard Driver
CVE-2013-2895
Linux Kernel < 3.11 - Denial of Service via Crafted HID Device
CVE-2013-2893
Linux Kernel < 3.11 - Denial of Service via HID Subsystem Heap-Based Out-of-Bounds Write
CVE-2013-2892
Linux Kernel < 3.11 - Denial of Service via HID PantherLord Driver Heap Overflow
CVE-2013-2891
Linux Kernel < 3.11 - Denial of Service via HID Steelseries Driver
CVE-2013-2890
Linux Kernel < 3.11 - Denial of Service via HID Sony Driver Heap-Based Out-of-Bounds Write
CVE-2013-2889
Linux Kernel < 3.11 - Denial of Service via HID ZeroPlus Driver Heap Overflow
CVE-2013-5324
Adobe Flash Player < 11.7.700.242 and 11.8.x < 11.8.800.168 - Remote Code Execution
CVE-2013-3363
Adobe Flash Player <11.7.700.242 - Memory Corruption
CVE-2013-3362
Adobe Flash Player <11.7.700.242 - Memory Corruption
CVE-2013-3361
Adobe Flash Player < 11.7.700.242 and 11.8.x < 11.8.800.168 - Remote Code Execution via Memory Corruption
CVE-2013-3360
Adobe Shockwave Player <12.0.4.144 - Memory Corruption
CVE-2013-3359
Adobe Shockwave Player <12.0.4.144 - Memory Corruption
CVE-2013-3356
Adobe Reader/Acrobat <10.1.8/<11.0.04 - Buffer Overflow
CVE-2013-3355
Adobe Reader/Acrobat <10.1.8/11.0.04 - Memory Corruption
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits