CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,020 vulnerabilities with CWE-119
CVE-2011-1938
PHP 5.3.3-5.3.6 - Stack-Based Buffer Overflow in socket_connect
CVE-2011-1512
Autonomy KeyView <8.5.2 FP3 - Buffer Overflow
CVE-2011-1218
Autonomy KeyView - Buffer Overflow via Crafted ZIP Attachment
CVE-2011-1217
IBM Lotus Notes < 8.5.2.2 - Remote Code Execution via Crafted .prz Attachment
CVE-2011-1216
IBM Lotus Notes < 8.5.2.2 - Remote Code Execution via Crafted Applix Spreadsheet Tag
CVE-2011-1215
IBM Lotus Notes < 8.5.2.2 - Remote Code Execution via Crafted Office Document Link
CVE-2011-1214
IBM Lotus Notes < 8.5.2.2 - Remote Code Execution via Crafted RTF Attachment
CVE-2011-1806
Google Chrome <11.0.696.71 - Memory Corruption
CVE-2011-0722
FFmpeg < 0.5.4 - Heap Memory Corruption via Malformed RealMedia File
CVE-2011-0615
Adobe Audition < 3.0.1 - Remote Code Execution via Crafted TRKM Chunk in SES File
CVE-2011-0614
Adobe Audition < 3.0.1 - Buffer Overflow via Crafted Audition Session File
CVE-2011-0622
Adobe Flash Player < 10.3.181.14 - Remote Code Execution via Memory Corruption
CVE-2011-0621
Adobe Flash Player < 10.3.181.14 - Remote Code Execution via Memory Corruption
CVE-2011-0620
Adobe Flash Player < 10.3.181.14 - Remote Code Execution via Memory Corruption
CVE-2011-0619
Adobe Flash Player < 10.3.181.14 - Remote Code Execution via Memory Corruption
CVE-2011-2089
ICONICS BizViz <9.22, GENESIS32 <9.22 - RCE
CVE-2011-1852
HP Intelligent Management Center 5.0 - Remote Code Execution via TFTP Packet Buffer Overflow
CVE-2011-1851
HP Intelligent Management Center 5.0 - Stack-Based Buffer Overflow via Long Mode Field
CVE-2011-1850
HP Intelligent Management Center 5.0 - Remote Code Execution via Logging Functionality
CVE-2011-1848
HP Intelligent Management Center 5.0 - Stack-Based Buffer Overflow via Crafted Length Field in Packet
CVE-2011-1720
Postfix <2.5.13, 2.6.x <2.6.10, 2.7.x <2.7.4, 2.8.x <2.8.3 - DoS
CVE-2011-1270
Microsoft PowerPoint 2002 SP3 and 2003 SP3 - Remote Code Execution via Crafted PowerPoint Document
CVE-2011-0341
MuPDF 2008.09.02 - Stack-based Buffer Overflow in pdfmoz_onmouse Function
CVE-2011-0905
Vino < 2.28.3, 2.32.x < 2.32.2, 3.0.x < 3.0.2, 3.1.x < 3.1.1 - DoS via Crafted Framebuffer Update
CVE-2011-0904
Vino < 2.28.3, 2.32.x < 2.32.2, 3.0.x < 3.0.2, 3.1.x < 3.1.1 - DoS via Framebuffer Update
Details
Vulnerabilities 14,020
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits