CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,014 vulnerabilities with CWE-119
CVE-2012-1339
Cisco Unified Computing System Fabric Interconnect - Denial of Service via SSH Session
CVE-2012-4146
Opera < 12.01 - Denial of Service via Crafted Web Page
CVE-2012-2859
Google Chrome < 21.0.1180.57 - Remote Code Execution via Tab Handling
CVE-2012-2858
Google Chrome <21.0.1180.57-21.0.1180.60 - Buffer Overflow
CVE-2012-2856
Google Chrome <21.0.1180.57-21.0.1180.60 - DoS
CVE-2012-1370
Cisco AnyConnect Secure Mobility Client 3.0 - Authenticated Denial of Service via Crafted Packet
CVE-2012-3444
Django < 1.3.2 and 1.4.x < 1.4.1 - Denial of Service via Large TIFF Image Processing
CVE-2012-3017
Siemens SIMATIC S7-400 PN CPU <5.x - DoS
CVE-2012-2978
NSD 3.0.x-3.0.8, 3.1.x-3.1.1, 3.2.x<3.2.12 - Denial of Service via Crafted DNS Packet
CVE-2012-4068
Citrix Provisioning Services 5.0-6.1 - Remote Code Execution via SoapServer Date/Time String
CVE-2012-4057
Remote-Anything 5.60.15 - Remote Code Execution via Crafted FLM File
CVE-2012-4054
CPE17 Autorun Killer < 1.7.1 - Buffer Overflow via Crafted INF File
CVE-2012-2442
Nokia PC Suite <7.1.180.64 - Buffer Overflow
CVE-2012-2152
dhcpcd 3.2.3 - Stack-based Buffer Overflow via Long Packet
CVE-2012-3686
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3683
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3682
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3681
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3680
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3679
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3678
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3674
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3670
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3669
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3668
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
Details
Vulnerabilities 14,014
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits