CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,015 vulnerabilities with CWE-119
CVE-2012-2026
Adobe Illustrator < CS6 - Remote Code Execution via Memory Corruption
CVE-2012-2025
Adobe Illustrator < CS6 - Remote Code Execution via Memory Corruption
CVE-2012-2024
Adobe Illustrator < CS6 - Remote Code Execution via Memory Corruption
CVE-2012-2023
Adobe Illustrator < CS6 - Remote Code Execution via Memory Corruption
CVE-2012-0780
Adobe Illustrator < CS6 - Memory Corruption
CVE-2012-0778
Adobe Flash Professional <CS6 - Buffer Overflow
CVE-2012-0162
Microsoft .NET Framework 4 - Remote Code Execution via Crafted XAML Browser Application
CVE-2012-0141
Microsoft Excel Remote Code Execution via Crafted Spreadsheet
CVE-2012-0672
iPhone OS < 5.1.1 - Remote Code Execution via Crafted Web Site
CVE-2012-2449
VMware Workstation/Player/Fusion/ESXi/ESX - DoS or Code Execution via Virtual Floppy Device
CVE-2012-2448
VMware ESXi 3.5-5.0 and ESX 3.5-4.1 - Remote Code Execution via NFS Traffic
CVE-2012-1517
VMware ESX and ESXi 4.1 - Memory Corruption via RPC Command Handling
CVE-2012-1516 CRITICAL
VMware ESX and ESXi 3.5-4.1 - Memory Corruption via RPC Command Handling
CVSS 9.9
CVE-2012-0202
IBM Cognos TM1 9.4.x-9.5.x - Remote Code Execution via Crafted Data
CVE-2012-2416
Asterisk Open Source <1.8.11.1 & 10.x <10.3.1 - DoS
CVE-2012-2415
Asterisk Open Source <10.3.1 - DoS
CVE-2012-0269
JustSystems Ichitaro <2011 - Buffer Overflow
CVE-2012-2418
Intuit QuickBooks <2012 - Buffer Overflow
CVE-2012-1144
FreeType < 2.4.9 - Remote Code Execution via Crafted TrueType Font
CVE-2012-1142
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1141
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1140
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1139
FreeType <2.4.9 - DoS/Arbitrary Code Execution
CVE-2012-1138
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1137
FreeType <2.4.9 - DoS/Code Injection
Details
Vulnerabilities 14,015
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits