CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-3344
Adobe Flash Player <11.7.700.232-11.8.800.94 - Buffer Overflow
CVE-2013-2878
Google Chrome < 28.0.1500.71 - Denial of Service via Out-of-Bounds Read in Text Handling
CVE-2013-2877
Google Chrome < 28.0.1500.71 - Denial of Service via Abrupt Document End in libxml2 Parser
CVE-2013-2875
Google Chrome < 28.0.1500.71 - Denial of Service via Out-of-Bounds Read in SVGInlineTextBox
CVE-2013-2869
Google Chrome <28.0.1500.71 - DoS
CVE-2013-3173
Microsoft Windows - Memory Corruption
CVE-2013-3172
Microsoft Windows - Buffer Overflow
CVE-2013-3115
Microsoft Internet Explorer <11 - Code Injection
CVE-2013-2054
strongSwan 2.0.0-4.3.4 - Buffer Overflow via DNS TXT Record Parsing
CVE-2013-2053
Openswan < 2.6.39 - Buffer Overflow via DNS TXT Record Parsing
CVE-2013-2052
libreswan 3.0-3.1 - Buffer Overflow in atodn Function via DNS TXT Records
CVE-2013-2237
Linux Kernel < 3.9 - Information Disclosure via IPSec Key Socket Notify Policy
CVE-2013-2234
Linux Kernel < 3.10 - Information Disclosure via Uninitialized Structure Members in IPSec Key Socket
CVE-2013-3563
Lianja SQL Server < 1.0 - Stack-Based Buffer Overflow via TCP Port 8001
CVE-2013-1961
libtiff < 4.0.3 - Stack-Based Buffer Overflow in t2p_write_pdf_page
CVE-2013-1960
libtiff < 4.0.3 - Heap-Based Buffer Overflow in t2p_process_jpeg_strip
CVE-2013-3028
IBM WebSphere MQ <7.0.1.11-7.5.0.2 - Buffer Overflow
CVE-2013-3399
Cisco Desktop Collaboration Experience DX650 - Buffer Overflow via Incorrect Memory Allocation
CVE-2013-1690 HIGH KEV
Firefox < 22.0 and Thunderbird < 17.0.7 - Remote Code Execution via onreadystatechange Event Handling
CVSS 8.8
CVE-2013-2110
PHP < 5.3.26 and 5.4.x < 5.4.16 - Heap-Based Buffer Overflow via quoted_printable_encode
CVE-2013-2960
IBM Tivoli Monitoring <6.2.3 - Buffer Overflow
CVE-2013-4631
Huawei AR 150, 200, 1200, 2200, and 3200 - Denial of Service via Malformed SNMPv3 Requests
CVE-2013-4630
Huawei AR 150, 200, 1200, 2200, and 3200 - Stack-based Buffer Overflow via SNMPv3 Requests
CVE-2013-1612
Symantec Endpoint Protection Manager - Memory Corruption
CVE-2013-2968
IBM Sterling Control Center <5.2.0.9-5.4.0.1 - DoS
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits