CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,014 vulnerabilities with CWE-119
CVE-2012-3701
Apple iTunes < 10.7 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3687
iTunes < 10.7 - Remote Code Execution via Crafted Web Site
CVE-2012-3632
Apple iTunes < 10.7 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3621
Apple iTunes < 10.7 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3607
iTunes < 10.7 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3606
iTunes < 10.7 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3935
Cisco Unified Presence < 8.6(3) - Denial of Service via Crafted XMPP Stream Header
CVE-2012-2410
RealNetworks RealPlayer <15.0.6.14 - Buffer Overflow
CVE-2012-2409
RealNetworks RealPlayer <15.0.6.14 - Buffer Overflow
CVE-2012-2408
RealPlayer < 15.0.6.14 - Heap Memory Corruption via Crafted AAC File
CVE-2012-2407
RealNetworks RealPlayer <15.0.6.14, <1.1.5 - Buffer Overflow
CVE-2012-2774
FFmpeg < 0.11 - Denial of Service via MPEG Video Frame Start
CVE-2012-4876
TRENDnet SecurView TV-IP121WN - Buffer Overflow
CVE-2012-4875
Ghostscript 9.04 - Heap-based Buffer Overflow via OutputFile Device Parameter
CVE-2012-4865
Oreans Themida 2.1.8.0 - Buffer Overflow via Crafted .TMD File
CVE-2012-3535
OpenJPEG < 1.5 - Heap-Based Buffer Overflow via Crafted JPEG2000 File
CVE-2012-3012
Arbiter Power Sentinel 1133A <11Jun2012 Rev 421 - DoS
CVE-2012-0275
Adobe Photoshop <12.0.5-13.0.1 - RCE
CVE-2012-2114
musl < 0.8.8 - Stack-Based Buffer Overflow in fprintf
CVE-2012-3534
Opensuse Leap < 3.1 - Memory Corruption
CVE-2012-2869
Google Chrome <21.0.1180.89 - DoS
CVE-2012-2865
Google Chrome <21.0.1180.89 - DoS
CVE-2012-2658
unixODBC 2.3.1 - Buffer Overflow in SQLDriverConnect via Long DRIVER Option
CVE-2012-2657
unixODBC < 2.3.1 - Buffer Overflow via SQLDriverConnect FILEDSN Option
CVE-2012-4170
Adobe Photoshop CS6 13.x - Remote Code Execution via Crafted File
Details
Vulnerabilities 14,014
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits