CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-3458
Cisco Adaptive Security Appliance Software - Denial of Service via X.509 Certificate Processing
CVE-2013-1119
Cisco WebEx Recording Format - Buffer Overflow
CVE-2013-1118
Cisco WebEx Recording Format (WRF) player <T28 - Buffer Overflow
CVE-2013-1117
Cisco WebEx Recording Format <T28 - Buffer Overflow
CVE-2013-1116
Cisco WebEx Advanced Recording Format - Buffer Overflow
CVE-2013-1115
Cisco WebEx Advanced Recording Format - Buffer Overflow
CVE-2013-5469
Cisco IOS - Denial of Service via Crafted ACK and FIN Packets
CVE-2013-3474
Cisco Wireless LAN Controller - Authenticated Denial of Service via Malformed Web Interface Parameter
CVE-2013-5018
strongSwan 4.1.11-5.0.4 - Denial of Service via ASN.1 Length Integer Overflow
CVE-2013-2197
Login Security 6.x-1.x < 6.x-1.3 and 7.x-1.x < 7.x-1.3 - Denial of Service via Login Delay Option
CVE-2013-2212
Xen 3.3-4.3 - Denial of Service via vmx_set_uc_mode GFN Range
CVE-2013-2072
Xen 4.0.x-4.2.x - Buffer Overflow in Python Bindings for xc_vcpu_setaffinity
CVE-2013-3582
Dell Latitude and Precision BIOS - Buffer Overflow via Crafted RBU Packet Values
CVE-2013-4974
RealNetworks RealPlayer <16.0.3.51-1.1.5 - RCE/DoS
CVE-2013-4973
RealNetworks RealPlayer <16.0.3.51 - Buffer Overflow
CVE-2013-5578
StarUML - Buffer Overflow in ToDot Method via Long Argument
CVE-2013-3462
Cisco Unified Communications Manager RCE (7.1(x)<7.1(5b)su6, 8.5(x)<8.5(1)su6, 8.6(x)<8.6(2a)su3, 9.x<9.1(2))
CVE-2013-2801
OSIsoft PI Interface for IEEE C37.118 <1.0.6.158 - DoS
CVE-2013-4155
OpenStack Swift < 1.9.1 - Authenticated Denial of Service via DELETE Request Timestamp Manipulation
CVE-2013-2210
Apache XML Security for C++ < 1.7.2 - Heap-Based Buffer Overflow via Malformed XPointer Expressions
CVE-2013-2156
Apache XML Security for C++ < 1.7.1 - Heap-based Buffer Overflow in Exclusive Canonicalization
CVE-2013-2154
Apache XML Security for C++ < 1.7.1 - Stack-based Buffer Overflow via Malformed XPointer Expressions
CVE-2013-4207
PuTTY < 0.63 - Denial of Service via DSA Signature Modular Inverse Overflow
CVE-2013-4206
PuTTY < 0.63 - Heap-Based Buffer Underflow via Crafted DSA Signature
CVE-2013-1872
Mesa 8.0.x and 9.0.x - Memory Corruption in Intel Driver via 3D Graphics Processing
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits