CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-3026
IBM Lotus Quickr <8.1.0.32-001a, <8.2.0.28-001a, <8.5.1.39-002a - RCE
CVE-2013-2066
libXv <= 1.0.7 - Buffer Overflow in XvQueryPortAttributes
CVE-2013-2005
libXt < 1.1.3 - Use-After-Free via XGetWindowProperty Return Value Mishandling
CVE-2013-2004
libX11 < 1.5.99.901 - Denial of Service via Recursive File Include Directives
CVE-2013-2001
libXxf86vm < 1.1.2 - Buffer Overflow via XF86VidModeGetGammaRamp
CVE-2013-2000
libXxf86dga <= 1.1.3 - Buffer Overflow in XDGAQueryModes and XDGASetMode Functions
CVE-2013-1999
libXvMC < 1.0.7 - Buffer Overflow via XvMCGetDRInfo
CVE-2013-1998
X.org libXi < 1.7.1 - Buffer Overflow in XGetDeviceButtonMapping, XIPassiveGrabDevice, and XQueryDeviceState
CVE-2013-1997
libX11 < 1.5.99.901 - Multiple Buffer Overflows in XAllocColorCells and Other Functions
CVE-2013-1996
X.org libFS <= 1.0.4 - Buffer Overflow in FSOpenServer
CVE-2013-1995
X.org libXi < 1.7.1 - Buffer Overflow in XListInputDevices
CVE-2013-3343
Adobe Flash Player <10.3.183.90,11.x <11.7.700.224 - RCE
CVE-2013-3142
Microsoft Internet Explorer 6-10 - Code Injection
CVE-2013-3141
Microsoft Internet Explorer <9 - Code Injection
CVE-2013-3139
Microsoft Internet Explorer 6-10 - Code Injection
CVE-2013-3126
Microsoft Internet Explorer <10 - RCE
CVE-2013-3125
Microsoft Internet Explorer 10 - Memory Corruption
CVE-2013-3124
Microsoft Internet Explorer 9 - Memory Corruption
CVE-2013-3123
Microsoft Internet Explorer <11 - Code Injection
CVE-2013-3122
Microsoft Internet Explorer 9 - Memory Corruption
CVE-2013-3121
Microsoft Internet Explorer 6-10 - Code Injection
CVE-2013-3120
Microsoft Internet Explorer 10 - Memory Corruption
CVE-2013-3119
Microsoft Internet Explorer <10 - Code Injection
CVE-2013-3118
Microsoft Internet Explorer 10 - Memory Corruption
CVE-2013-3117
Microsoft Internet Explorer 9 - Code Injection
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits