CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,015 vulnerabilities with CWE-119
CVE-2012-0594
iPhone OS < 5.1 and iTunes < 10.6 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-0593
iPhone OS < 5.1 and iTunes < 10.6 - Remote Code Execution via Crafted Web Site
CVE-2012-0592
iPhone OS < 5.1 and iTunes < 10.6 - Remote Code Execution via WebKit Memory Corruption
CVE-2012-0591
iPhone OS < 5.1 and iTunes < 10.6 - Remote Code Execution via Crafted Web Site
CVE-2012-0397
EMC RSA SecurID Software Token Converter <2.6.1 - Buffer Overflow
CVE-2012-0201
IBM Personal Communications 5.9.x-5.9.8 and 6.0.x-6.0.4 - Stack-Based Buffer Overflow via WorkStation Profile String
CVE-2012-0870
Samba 3.0 - Heap-Based Buffer Overflow via Batched AndX Request
CVE-2012-0243
Advantech WebAccess < 7.0 - Remote Code Execution via ActiveX Control Buffer Overflow
CVE-2012-0241
Advantech WebAccess < 7.0 - Denial of Service via Modified Stream Identifier
CVE-2012-0238
Advantech WebAccess < 7.0 - Remote Code Execution via opcImg.asp Stack Overflow
CVE-2012-0237
Advantech WebAccess < 7.0 - Unauthenticated Arbitrary Setting Modification via Crafted URL
CVE-2012-1222
RabidHamster R2/Extreme < 1.65 - Authenticated Stack-Based Buffer Overflow via TCP Port 23
CVE-2012-0766
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0764
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0763
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0762
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0761
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0760
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0759
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0758
Adobe Shockwave Player <11.6.4.634 - Buffer Overflow
CVE-2012-0757
Adobe Shockwave Player <11.6.4.634 - Memory Corruption
CVE-2012-0150
Microsoft Windows Vista SP2, Server 2008 SP2/R2/R2 SP1, and 7 Gold/SP1 - Remote Code Execution via Crafted Media File
CVE-2012-1055
PhotoLine 17.01 - Heap-based Buffer Overflow via JPEG2000 QCD Marker Segment
CVE-2012-1052
IvanView 1.2.15 - Remote Code Execution via Crafted JPEG2000 QCD Marker Segment
CVE-2012-1051
XnView 1.98.5 - Remote Code Execution via JPEG2000 QCD Marker Segment
Details
Vulnerabilities 14,015
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits