CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,012 vulnerabilities with CWE-119
CVE-2012-1885
Microsoft Excel 2003 SP3, 2007 SP2-SP3, 2010 SP1 - Remote Code Execution via Crafted Spreadsheet
CVE-2012-5287
Adobe Flash Player <10.3.183.29 & <11.x - Buffer Overflow
CVE-2012-5286
Adobe Flash Player <10.3.183.29 & <11.x - Buffer Overflow
CVE-2012-5285
Adobe Flash Player <10.3.183.29 & <11.x - Buffer Overflow
CVE-2012-4513
Konqueror in KDE 4.7.3 - Heap-Based Buffer Over-Read via Large Canvas Dimensions
CVE-2012-4505
libproxy 0.2.x and 0.3.x - Heap-Based Buffer Overflow via Crafted Content-Length in HTTP Response
CVE-2012-4504
libproxy 0.4.x < 0.4.9 - Stack-Based Buffer Overflow via Large proxy.pac File
CVE-2012-3758
Apple QuickTime < 7.7.3 - Remote Code Execution via Crafted TeXML Text3GTrack Transform Attribute
CVE-2012-3756
Apple QuickTime < 7.7.3 - Remote Code Execution via Crafted MP4 rnet Box
CVE-2012-3755
Apple QuickTime < 7.7.3 - Remote Code Execution via Crafted Targa Image
CVE-2012-3753
Apple QuickTime < 7.7.3 - Remote Code Execution via Crafted MIME Type
CVE-2012-3752
Apple QuickTime < 7.7.3 - Remote Code Execution via TeXML Style Element
CVE-2012-5128
Google Chrome < 23.0.1271.64 - Memory Corruption in V8
CVE-2012-5124
Google Chrome <23.0.1271.64 - Memory Corruption
CVE-2012-5123
Google Chrome < 23.0.1271.64 - Denial of Service via Out-of-Bounds Read in Skia
CVE-2012-5120
Google Chrome < 23.0.1271.64 - Denial of Service via V8 Array Out-of-Bounds Access
CVE-2012-5115
Google Chrome < 23.0.1271.64 - Denial of Service via Wild Writes in Graphics Drivers
CVE-2012-5280
Adobe Flash Player <10.3.183.43 & 11.x <11.5.502.110 - RCE
CVE-2012-5279
Adobe Flash Player <10.3.183.43,11.x <11.5.502.110 - Memory Corruption
CVE-2012-5277
Adobe Flash Player <10.3.183.43 & 11.x <11.5.502.110 - RCE
CVE-2012-5276
Adobe Flash Player <10.3.183.43 & 11.x <11.5.502.110 - RCE
CVE-2012-5275
Adobe Flash Player <10.3.183.43 & 11.x <11.5.502.110 - Buffer Overflow
CVE-2012-5274
Adobe Flash Player <10.3.183.43 & 11.x <11.5.502.110 - Buffer Overflow
CVE-2012-4987
RealNetworks RealPlayer <15.0.5.109 - Buffer Overflow
CVE-2012-5416
Cisco Unified MeetingPlace < 7.1MR1 Patch 1, 8.0 < 8.0MR1 Patch 1, 8.5 < 8.5MR3 - Denial of Service via POST Request
Details
Vulnerabilities 14,012
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits