CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,020 vulnerabilities with CWE-119
CVE-2011-1868
Microsoft Windows XP/Server 2003 - Code Injection
CVE-2011-1279
Microsoft Excel 2002/2003, Office 2004/2008 for Mac - RCE via Crafted Spreadsheet
CVE-2011-1278
Microsoft Excel 2002 SP3 and Office 2004 for Mac - Remote Code Execution via Crafted Spreadsheet
CVE-2011-1277
Microsoft Excel 2002 SP3, Office 2008 for Mac - RCE via Crafted Spreadsheet
CVE-2011-1276
Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2 - Remote Code Execution via Crafted Spreadsheet
CVE-2011-1275
Microsoft Excel - Remote Code Execution via Crafted Spreadsheet
CVE-2011-1274
Microsoft Excel 2002/2003/2007, Office 2004/2008 for Mac - RCE via Crafted Spreadsheet
CVE-2011-1273
Microsoft Excel 2002/2003/2007/2010, Office 2004/2008/2011 for Mac - RCE via Crafted Spreadsheet
CVE-2011-1260
Microsoft Internet Explorer 8 and 9 - Remote Code Execution via Memory Corruption
CVE-2011-1924
Tor < 0.2.1.29 - Denial of Service via Policy Port List Overflow
CVE-2011-1708
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1817
Google Chrome <12.0.742.91 - Memory Corruption
CVE-2011-1707
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1706
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1705
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1704
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1703
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1702
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1701
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1700
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-1699
Novell iPrint Client <5.64 - Buffer Overflow
CVE-2011-2217
Tom Sawyer GET Extension Factory <5.5.2.237 - Memory Corruption
CVE-2011-1959
Wireshark 1.2.x < 1.2.17 and 1.4.x < 1.4.7 - Denial of Service via Snoop File Buffer Over-Read
CVE-2011-2328
HP LoadRunner - Buffer Overflow via Long Directives in .usr File
CVE-2011-1220
IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, 4.3.1 - Authenticated Stack-Based Buffer Overflow via Long opts Field
Details
Vulnerabilities 14,020
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits