CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,014 vulnerabilities with CWE-119
CVE-2012-1831
WellinTech KingView < 6.53 - Remote Code Execution via Crafted TCP Packet
CVE-2012-1830
WellinTech KingView < 6.53 - Remote Code Execution via Crafted TCP Packet
CVE-2012-3845
LAN Messenger 1.2.28 - Denial of Service via Long Initiation Request String
CVE-2012-2394
Wireshark <1.4.13 & 1.6.x <1.6.8 - DoS
CVE-2012-2393
Wireshark 1.4.x < 1.4.13 and 1.6.x < 1.6.8 - Denial of Service in DIAMETER Dissector
CVE-2012-1164
OpenLDAP < 2.4.30 - Denial of Service via LDAP Search Query with attrsOnly
CVE-2012-3057
Cisco WebEx Recording Format - Buffer Overflow
CVE-2012-3056
Cisco WebEx Recording Format - Buffer Overflow
CVE-2012-3055
Cisco WebEx Recording Format (WRF) player - Buffer Overflow
CVE-2012-3054
Cisco WebEx Recording Format (WRF) player - Buffer Overflow
CVE-2012-3053
Cisco WebEx Advanced Recording Format Player 27.11.0-27.11.25 - Remote Code Execution via Crafted ARF File
CVE-2012-3815
Winlog Lite < 2.07.18 - Remote Code Execution via Crafted TCP Packet
CVE-2012-2833
Google Chrome <20.0.1132.43 - Buffer Overflow
CVE-2012-3797
Pro-face Pro-Server EX < 1.30.000 and WinGP PC Runtime < 3.1.00 - Heap Memory Corruption via Crafted Packet
CVE-2012-3795
Pro-face Pro-Server EX < 1.30.000 and WinGP PC Runtime < 3.1.00 - Denial of Service via Crafted Packet
CVE-2012-3794
Pro-face Pro-Server EX < 1.30.000 and WinGP PC Runtime < 3.1.00 - Denial of Service via Crafted Packet
CVE-2012-3793
Pro-face Pro-Server EX < 1.30.000 and WinGP PC Runtime < 3.1.00 - Denial of Service via Crafted Packet
CVE-2012-3792
Pro-face Pro-Server EX < 1.30.000 and WinGP PC Runtime < 3.1.00 - Denial of Service via Crafted Packet
CVE-2012-2127
Linux Kernel < 3.2 - Denial of Service via PID Namespace Reference Leak
CVE-2012-0219
socat 1.4.0.0-1.7.2.0 and 2.0.0-b1-2.0.0-b4 - Heap-Based Buffer Overflow in xioscan_readline
CVE-2012-2175
IBM Lotus iNotes 8.5.x - Buffer Overflow in Attachment_Times Method
CVE-2012-0802
spamdyke < 4.3.0 - Remote Code Execution via Buffer Overflow in snprintf/vsnprintf Usage
CVE-2012-2091
FlightGear and SimGear < 2.6.0 - Buffer Overflow via Crafted Aircraft XML or UDP Packet
CVE-2012-3561
Opera < 11.64 - Remote Code Execution via Crafted URL String
CVE-2012-0217
FreeBSD Intel SYSRET Privilege Escalation
Details
Vulnerabilities 14,014
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits