CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,020 vulnerabilities with CWE-119
CVE-2011-2589
UUPlayer ActiveX Control 6.0.0.1 - Heap-Based Buffer Overflow via SendLogAction Method
CVE-2011-2900
shttpd 1.42 - Stack-based Buffer Overflow in _shttpd_put_dir Function
CVE-2011-2591
Provideo ActiveX Controls - Remote Code Execution via Crafted Input Fields
CVE-2011-0252
Apple QuickTime < 7.7 - Remote Code Execution via Crafted STTS Atoms
CVE-2011-0251
Apple QuickTime < 7.7 - Remote Code Execution via Crafted STSZ Atoms
CVE-2011-0250
Apple QuickTime < 7.7 - Remote Code Execution via Crafted STSS Atoms
CVE-2011-0249
Apple QuickTime < 7.7 - Remote Code Execution via Crafted STSC Atoms
CVE-2011-0248
QuickTime < 7.7 - Remote Code Execution via Crafted QTL File
CVE-2011-0247
Apple QuickTime < 7.7 - Remote Code Execution via Crafted H.264 Movie
CVE-2011-0246
Apple QuickTime < 7.7 - Remote Code Execution via Crafted GIF File
CVE-2011-0245
Apple QuickTime < 7.7 - Remote Code Execution via Crafted PICT File
CVE-2011-2704
MapServer < 4.10.7 and 5.x < 5.6.7 - Remote Code Execution via OGC Filter Encoding
CVE-2011-2962
Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 - Stack-Based Buffer Overflow via ActiveX Controls
CVE-2011-2961
Sunway pNetPower 6.0.11.3 - Heap-Based Buffer Overflow via Crafted UDP Packet
CVE-2011-2960
Sunway ForceControl 6.1 SP1-SP3 - Heap-Based Buffer Overflow via Crafted URL
CVE-2011-2959
7t IGSS < 9 - Stack-Based Buffer Overflow via Crafted Packet to TCP Port 22202
CVE-2011-2667
CA Total Defense r12 and Gateway Security 8.1 - Remote Code Execution via Malformed HTTP Request
CVE-2011-2696
libsndfile < 1.0.25 - Heap-Based Buffer Overflow via Crafted PAF File
CVE-2011-2588
VLC media player < 1.1.11 - Heap-Based Buffer Overflow in AVI Demuxer
CVE-2011-2587
VLC media player 1.1.x - Heap-Based Buffer Overflow in RealMedia Demuxer
CVE-2011-2882
Citrix Access Gateway Enterprise Edition 8.1-67.7 9.0-70.5 9.1-96.4 - Remote Code Execution via Crafted HTTP Header Data
CVE-2011-2685
LibreOffice < 3.3.3 - Stack-based Buffer Overflow in Lotus Word Pro Import Filter
CVE-2011-1797
WebKit <5.0.6 - Denial of Service
CVE-2011-1462
Safari < 5.0.6 - Remote Code Execution via Memory Corruption
CVE-2011-1457
Safari < 5.0.6 - Remote Code Execution via Memory Corruption
Details
Vulnerabilities 14,020
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits