CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,020 vulnerabilities with CWE-119
CVE-2011-0061
Firefox 3.6.x < 3.6.14 and SeaMonkey < 2.0.12 - Remote Code Execution via Crafted JPEG Image
CVE-2011-0058
Mozilla Firefox <3.5.17 & SeaMonkey <2.0.12 - Buffer Overflow
CVE-2011-0056
Mozilla Firefox <3.5.17-3.6.14 & SeaMonkey <2.0.12 - Buffer Overflow
CVE-2011-0054
Mozilla Firefox <3.5.17 & SeaMonkey <2.0.12 - Buffer Overflow
CVE-2011-0719
Samba 3.x < 3.3.15, 3.4.x < 3.4.12, 3.5.x < 3.5.7 - Denial of Service via File Descriptor Range Bypass
CVE-2011-0454
IIJ Seil/b1 Firmware - Memory Corruption
CVE-2011-0379
Cisco ASA and TelePresence - Remote Code Execution via Cisco Discovery Protocol Packet
CVE-2011-1065
PIPI Player 2.8.0.0 - Remote Code Execution via Long Arguments to PlayURL or PlayURLWithLocalPlayer Methods
CVE-2011-0530
nbd < 2.9.20 - Remote Code Execution via Long Request
CVE-2011-1049
Hex-Rays IDA Pro 5.7 and 6.0 - Buffer Overflow in Mach-O Input File Loader
CVE-2011-0654
Windows Server 2003 - Remote Code Execution via Malformed BROWSER ELECTION Message
CVE-2011-1033
IBM Informix Dynamic Server 11.50 - Remote Code Execution via USELASTCOMMITTED Session Environment Option
CVE-2011-0978
Microsoft Excel - Memory Corruption
CVE-2011-0975
BMC Performance Analysis for Servers 7.4.00-7.5.10 - Remote Code Execution via BGS_MULTIPLE_READS Command
CVE-2011-0606
Adobe Acrobat Reader 10.x < 10.0.1, 9.x < 9.4.2, 8.x < 8.2.6 - Remote Code Execution via Crafted Length Value
CVE-2011-0605
Adobe Acrobat Reader 8.x < 8.2.6, 9.x < 9.4.2, 10.x < 10.0.1 - Remote Code Execution
CVE-2011-0603
Adobe Acrobat Reader 8.x < 8.2.6, 9.x < 9.4.2, 10.x < 10.0.1 - Remote Code Execution via Crafted Image
CVE-2011-0589
Adobe Acrobat Reader 10.x < 10.0.1, 9.x < 9.4.2, 8.x < 8.2.6 - Remote Code Execution via Memory Corruption
CVE-2011-0567
Adobe Acrobat Reader 10.x < 10.0.1, 9.x < 9.4.2, 8.x < 8.2.6 - Remote Code Execution via Crafted Image
CVE-2011-0566
Adobe Acrobat Reader 8.x < 8.2.6, 9.x < 9.4.2, 10.x < 10.0.1 - Remote Code Execution via Crafted Image
CVE-2011-0563
Adobe Acrobat and Reader 10.x < 10.0.1, 9.x < 9.4.2, 8.x < 8.2.6 - Remote Code Execution
CVE-2011-0608
Adobe Flash Player < 10.2.152.26 - Remote Code Execution via Memory Corruption
CVE-2011-0607
Adobe Flash Player < 10.2.152.26 - Remote Code Execution via Memory Corruption
CVE-2011-0578
Adobe Flash Player < 10.2.152.26 - Remote Code Execution via Memory Corruption
CVE-2011-0574
Adobe Flash Player < 10.2.152.26 - Remote Code Execution via Memory Corruption
Details
Vulnerabilities 14,020
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits