CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,014 vulnerabilities with CWE-119
CVE-2012-3667
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3666
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3665
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3664
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3663
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3661
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3656
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3655
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3646
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3645
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3644
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3642
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3641
Safari < 6.0 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-3640
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3639
Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3636
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3634
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3629
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3627
Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-3625
Apple Safari < 6.0 - Remote Code Execution via Crafted Web Site
CVE-2012-0683
Safari < 5.1.7 - Remote Code Execution via Memory Corruption
CVE-2012-0682
Safari < 5.1.7 - Remote Code Execution via Memory Corruption
CVE-2012-3571
ISC DHCP 4.1.2-4.2.4 and 4.1-ESV < R6 - Denial of Service via Malformed Client Identifier
CVE-2012-3570
ISC DHCP 4.2.x < 4.2.4-P1 - Denial of Service via Crafted DHCPv6 Client Identifier
CVE-2012-2197
IBM DB2 - Stack-based Buffer Overflow in Java Stored Procedure Infrastructure
Details
Vulnerabilities 14,014
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits