CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,014 vulnerabilities with CWE-119
CVE-2012-5196
Condor <7.6.10, <7.8.4 - Buffer Overflow
CVE-2012-2897 HIGH
Microsoft Windows < - Memory Corruption
CVSS 7.8
CVE-2012-2895
Google Chrome < 22.0.1229.79 - Denial of Service or Arbitrary Code Execution via PDF Out-of-Bounds Write
CVE-2012-2884
Google Chrome < 22.0.1229.79 - Denial of Service via Out-of-Bounds Read in Skia
CVE-2012-2883
Google Chrome < 22.0.1229.79 - Remote Code Execution via Skia Out-of-Bounds Write
CVE-2012-2881
Google Chrome < 22.0.1229.79 - Denial of Service via Plug-in DOM Tree Corruption
CVE-2012-2879
Google Chrome < 22.0.1229.79 - Denial of Service via Crafted Document
CVE-2012-2876
Google Chrome <22.0.1229.79 - Buffer Overflow
CVE-2012-2874
Google Chrome < 22.0.1229.79 - Out-of-Bounds Write in Skia
CVE-2012-3334
IBM Informix Dynamic Server 11.50-11.50.xC9W1 & 11.70-11.70.xC4 Stack Overflow via SET COLLATION
CVE-2012-3747
iPhone OS < 5.1.1 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3745
iPhone OS < 6 - Denial of Service via Crafted SMS User-Data Header
CVE-2012-3727
iPhone OS < 6 - Remote Code Execution via Crafted Racoon Configuration File
CVE-2012-3723
macOS < 10.7.5 - Memory Corruption via USB Hub Descriptor
CVE-2012-3716
Mac OS X 10.7.x < 10.7.5 - Remote Code Execution via Crafted Text Glyph
CVE-2012-0650
Apple Mac OS X < 10.6.8 - Remote Code Execution via DirectoryService Proxy Buffer Overflow
CVE-2012-5006
Caminova DjVu Browser Plug-in <6.1.4.27993 - Buffer Overflow
CVE-2012-5002
Ricoh DC Software DL-10 <4.5.0.1 - Buffer Overflow
CVE-2012-4992
FlashFXP 4.2 - Authenticated Remote Code Execution via Long Unicode String to TListbox or TComboBox
CVE-2012-1184
Asterisk 1.8.x < 1.8.10.1 and 10.x < 10.2.1 - Stack-Based Buffer Overflow via HTTP Digest Authentication Header
CVE-2012-1183
Asterisk < 1.4.44, < 1.6.2.23, < 1.8.10.1, < 10.2.1 - Stack-Based Buffer Overflow
CVE-2012-3547
FreeRADIUS 2.1.10-2.1.12 - Stack-Based Buffer Overflow via Long Client Certificate Timestamp
CVE-2012-3915
Cisco IOS 15.2 - Denial of Service via DMVPN Tunnel Traffic
CVE-2012-3901
Cisco IPS 4200 Series 7.0-7.1 - Denial of Service via Network Traffic
CVE-2012-4924
ASUS Net4Switch 1.0.0020 - Buffer Overflow
Details
Vulnerabilities 14,014
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits