CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,015 vulnerabilities with CWE-119
CVE-2012-1136
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1135
FreeType <2.4.9 - DoS/Arbitrary Code Execution
CVE-2012-1134
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1133
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1132
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1131
FreeType <2.4.9 - DoS/Arbitrary Code Execution
CVE-2012-1130
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1129
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1128
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1127
FreeType <2.4.9 - DoS/Code Injection
CVE-2012-1126
FreeType <2.4.9 - DoS/Arbitrary Code Execution
CVE-2012-0472
Mozilla Firefox <11.0 - Memory Corruption
CVE-2012-0470
Mozilla Firefox <12 - Buffer Overflow
CVE-2012-0468
Mozilla Firefox <12 - DoS/Arbitrary Code Execution
CVE-2012-0708
IBM Rational ClearQuest <7.1.1.9, <7.1.2.6, <8.0.0.2 - Buffer Overflow
CVE-2012-2110
OpenSSL < 0.9.8v, 1.0.0 < 1.0.0i, 1.0.1 < 1.0.1a - Buffer Overflow via Crafted DER Data
CVE-2012-1802
Siemens Scalance X Industrial Ethernet Switch Firmware < 3.7.2 - Buffer Overflow via Malformed URL
CVE-2012-1801
ABB WebWare Server/SDK/Interlink/S4 OPC/QuickTeach/RobotStudio - RCE via Crafted Input
CVE-2012-1800
Siemens Scalance S602/S612/S613 < 2.3.0 - Stack-based Buffer Overflow via Profinet DCP Frame
CVE-2012-0278
IrfanView <4.3.4.0 - Buffer Overflow
CVE-2012-0942
RealNetworks Helix Server <14.3 - RCE
CVE-2012-1805
Koyo ECOM Ethernet Module - Buffer Overflow via Long String Parameters
CVE-2012-1499
OpenJPEG < 1.5 - Remote Code Execution via Crafted Palette Index in CMAP Record
CVE-2012-0043
Wireshark 1.4.x < 1.4.11 and 1.6.x < 1.6.5 - Buffer Overflow in RLC Dissector
CVE-2012-0777
Adobe Reader/Acrobat <9.5.1, <10.1.3 - Memory Corruption
Details
Vulnerabilities 14,015
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits