CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,014 vulnerabilities with CWE-119
CVE-2012-0668
Apple QuickTime < 7.7.2 - Remote Code Execution via Crafted RLE-Encoded Movie File
CVE-2012-0666
Apple QuickTime <7.7.2 - Buffer Overflow
CVE-2012-0665
Apple QuickTime <7.7.2 - Buffer Overflow
CVE-2012-0664
Apple QuickTime <7.7.2 - Buffer Overflow
CVE-2012-0663
Apple QuickTime <7.7.2 - Buffer Overflow
CVE-2012-0265
Apple QuickTime <7.7.2 - Buffer Overflow
CVE-2012-2612
SAP NetWeaver 7.0 EHP1 and EHP2 - Denial of Service via Crafted SAP Diag Packet
CVE-2012-2514
SAP NetWeaver 7.0 EHP1 and EHP2 - Denial of Service via Crafted SAP Diag Packet
CVE-2012-2513
SAP NetWeaver 7.0 EHP1 and EHP2 - Denial of Service via Crafted SAP Diag Packet
CVE-2012-2512
SAP NetWeaver 7.0 EHP1 and EHP2 - Denial of Service via Crafted SAP Diag Packet
CVE-2012-2511
SAP NetWeaver 7.0 EHP1 and EHP2 - Denial of Service via Crafted SAP Diag Packet
CVE-2012-2277
EMC Documentum Information Rights Management 4.x-5.x - Denial of Service via Newline in Batch Begin Untethered Command
CVE-2012-2276
EMC Documentum Information Rights Management - Denial of Service via Invalid FIPS Fields or Version Number
CVE-2012-1804
Progea Movicon < 11.3 - Denial of Service via Crafted HTTP Request
CVE-2012-2329
PHP 5.4.x < 5.4.3 - Buffer Overflow via HTTP Request Header
CVE-2012-0660
Mac OS X < 10.7.4 - Remote Code Execution via Crafted MPEG File
CVE-2012-0658
Apple Mac OS X <10.7.4 - Buffer Overflow
CVE-2012-0654
Mac OS X < 10.7.4 - Remote Code Execution via X.509 Certificate Processing
CVE-2012-2033
Adobe Shockwave Player < 11.6.5.635 - Remote Code Execution via Memory Corruption
CVE-2012-2032
Adobe Shockwave Player < 11.6.5.635 - Remote Code Execution via Memory Corruption
CVE-2012-2031
Adobe Shockwave Player < 11.6.5.635 - Remote Code Execution via Memory Corruption
CVE-2012-2030
Adobe Shockwave Player < 11.6.5.635 - Remote Code Execution via Memory Corruption
CVE-2012-2029
Adobe Shockwave Player < 11.6.5.635 - Remote Code Execution via Memory Corruption
CVE-2012-2028
Adobe Photoshop CS5 < 12.0.5 and CS5.1 < 12.1.1 - Remote Code Execution
CVE-2012-2026
Adobe Illustrator < CS6 - Remote Code Execution via Memory Corruption
Details
Vulnerabilities 14,014
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits