CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-1772
Linux Kernel < 3.4.33 - Denial of Service via Log Prefix Buffer Overflow
CVE-2013-1137
Cisco Unified Presence Server <9.1.1 - DoS
CVE-2013-0504
Adobe Flash Player <11.6.602.171 - Buffer Overflow
CVE-2013-1138
Cisco Adaptive Security Appliance Software - Denial of Service via NAT Process
CVE-2013-0220
SSSD < 1.9.4 - Denial of Service via Crafted SSSD Packet
CVE-2013-0113
Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 - Remote Code Execution via Crafted PDF Document
CVE-2013-0896
Google Chrome <25.0.1364.97-25.0.1364.99 - DoS
CVE-2013-0310
Linux Kernel < 3.4.8 - Denial of Service via IPOPT_CIPSO IP_OPTIONS Setsockopt
CVE-2013-0309
Linux Kernel < 3.6.2 - Denial of Service via PROT_NONE Memory Handling
CVE-2013-0772
Firefox < 19.0 - Out-of-Bounds Read via Crafted GIF Image
CVE-2013-0272
Pidgin < 2.10.7 - Remote Code Execution via Long HTTP Header in MXit Protocol Plugin
CVE-2013-0658
Schneider Electric Accutech Manager <2.00.1 - Buffer Overflow
CVE-2013-0636
Adobe Shockwave Player <12.0.0.112 - Buffer Overflow
CVE-2013-0635
Adobe Shockwave Player <12.0.0.112 - Memory Corruption
CVE-2013-0030
Internet Explorer 6-10 - Remote Code Execution via VML Buffer Overflow
CVE-2013-0231
Linux Kernel 2.6.18 and 3.8 - Denial of Service via PCI Backend Driver Log Flood
CVE-2013-1373
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168 - Remote Code Execution
CVE-2013-1372
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168 - Remote Code Execution
CVE-2013-1370
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168 - Remote Code Execution
CVE-2013-1369
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168, AIR < 3.6.0.597, AIR SDK < 3.6.0.599 - Remote Code Execution
CVE-2013-1368
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168 - Remote Code Execution
CVE-2013-1367
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168 - Remote Code Execution
CVE-2013-1366
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168 - Remote Code Execution
CVE-2013-1365
Adobe Flash Player < 10.3.183.63 and 11.x < 11.6.602.168 - Remote Code Execution
CVE-2013-0647
Adobe Flash Player <10.3.183.63 & <11.x - Memory Corruption
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits