CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,020 vulnerabilities with CWE-119
CVE-2011-0651
Icon Labs Iconfidant SSL Server < 1.2.9 - Buffer Overflow via Client Master Key Packet
CVE-2011-0520
MaraDNS - Heap-Based Buffer Overflow via Long DNS Hostname with Many Labels
CVE-2011-0021
VLC Media Player <1.1.6 - Buffer Overflow
CVE-2011-0273
HP OpenView Storage Data Protector Cell Manager 6.11 - Remote Code Execution via Buffer Overflow in crs.exe
CVE-2011-0352
Linksys WRT54GC Router < 1.06.1 - Denial of Service via Long POST Request
CVE-2011-0020
Pango < 1.28.3 - Heap-Based Buffer Overflow via Crafted Font File
CVE-2011-0517
Sielco Sistemi Winlog Pro < 2.07.00 - Remote Code Execution via Crafted 0x02 Opcode
CVE-2011-0514
HP Data Protector Manager 6.11 - Denial of Service via Large Data Packet to RDS Service
CVE-2011-0501
Music Animation Machine MIDI Player 2006aug19 Release 035 - Stack-Based Buffer Overflow via Long Line in .mamx File
CVE-2011-0500
VideoSpirit Lite and Pro <= 1.68 - Buffer Overflow via Project File valitem Attribute
CVE-2011-0499
VideoSpirit Pro < 1.6.8.1 and VideoSpirit Lite < 1.4.0.1 - Buffer Overflow via Long Name Attribute in .visprj File
CVE-2011-0498
Nokia Multimedia Player 1.00.55.5010 - Stack-Based Buffer Overflow via Playlist File
CVE-2011-0427
Tor < 0.2.1.28 - Heap-Based Buffer Overflow
CVE-2011-0488
Advantech Studio 6.1 and InduSoft Web Studio 7.0 - Stack-Based Buffer Overflow via Long TCP Request
CVE-2011-0408
libpng 1.5.x - Buffer Overflow via Crafted Palette-Based PNG Image
CVE-2011-0477
Google Chrome < 8.0.552.237 and Chrome OS < 8.0.552.344 - Memory Corruption via Video Frame Size Mismatch
CVE-2011-0476
Google Chrome < 8.0.552.237 and Chrome OS < 8.0.552.344 - Memory Corruption via PDF Processing
CVE-2011-0310
IBM WebSphere MQ 7.0 - Remote Code Execution via Crafted Message Header
CVE-2011-0269
HP OpenView Network Node Manager 7.51, 7.53 - Remote Code Execution via Long schd_select1 Parameter
CVE-2011-0268
HP OpenView Network Node Manager 7.51, 7.53 - Remote Code Execution via Long text1 Parameter
CVE-2011-0267
HP OpenView Network Node Manager 7.51, 7.53 - Remote Code Execution via Long schdParams or nameParams
CVE-2011-0266
HP OpenView Network Node Manager 7.51 and 7.53 - Buffer Overflow via Long nameParams Parameter
CVE-2011-0265
HP OpenView Network Node Manager 7.51 and 7.53 - Remote Code Execution via Long data_select1 Parameter
CVE-2011-0264
HP OpenView Network Node Manager 7.51 and 7.53 - Stack-Based Buffer Overflow via Long COOKIE Variable
CVE-2011-0263
HP OpenView Network Node Manager 7.51-7.53 - Remote Code Execution via Long Source or Destination Node Variable
Details
Vulnerabilities 14,020
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits