CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,020 vulnerabilities with CWE-119
CVE-2011-0262
HP OpenView Network Node Manager 7.51 and 7.53 - Buffer Overflow via jovgraph.exe
CVE-2011-0444
Wireshark 1.2.0-1.2.13 and 1.4.0-1.4.2 - Buffer Overflow in MAC-LTE Dissector
CVE-2011-0314
IBM WebSphere MQ 6.0-6.0.2.10 and 7.0-7.0.1.4 - Authenticated Heap-based Buffer Overflow
CVE-2011-0406
WellinTech KingView 6.53 - Remote Code Execution via Long TCP Request to Port 777
CVE-2011-0404
NetSupport Manager Agent <=11.00 Remote Code Execution via Long Control Hostname
CVE-2010-0749 MEDIUM
Transmission < 1.92 - Denial of Service via Corrupted Endgame Data
CVSS 5.3
CVE-2010-5332 MEDIUM
Linux kernel <2.6.37 - Buffer Overflow
CVSS 5.6
CVE-2010-0109 MEDIUM
Symantec Altiris Deployment Solution 6.9.x - Denial of Service via DBManager
CVSS 6.5
CVE-2010-1816 HIGH
Mac OS X 10.6-10.6.3 and Mac OS X Server 10.6-10.6.3 - Remote Code Execution via Crafted Image
CVSS 7.8
CVE-2010-4314 HIGH
Novell iPrint < 5.42 - Remote Code Execution via ActiveX Plugin Name Parameter Overflow
CVSS 8.8
CVE-2010-5325 CRITICAL
Foomatic-filters <4.0.6 - Buffer Overflow
CVSS 9.8
CVE-2010-1445
VideoLAN VLC media player <1.0.6 - Buffer Overflow
CVE-2010-1444
VideoLAN VLC media player <1.0.6 - DoS/Code Injection
CVE-2010-1442
VideoLAN VLC media player <1.0.6 - DoS/Code Injection
CVE-2010-1441
VideoLAN VLC media player <1.0.6 - Buffer Overflow
CVE-2010-5111
echoping 6.0.2 - Buffer Overflow in readline.c via Crafted Reply
CVE-2010-5301
Kolibri 2.0 - Remote Code Execution via Long URI in HEAD Request
CVE-2010-5300
Jzip <2.0.0.132900 - Buffer Overflow
CVE-2010-5299
MicroP 0.1.1.1600 - Buffer Overflow
CVE-2010-0430
Red Hat Enterprise Virtualization Hypervisor < 5.4-2.1 - Arbitrary Memory Read/Write via libspice Cairo Memory Mapping
CVE-2010-1159
aircrack-ng < 1.1 - Heap-Based Buffer Overflow via EAPOL Packet
CVE-2010-5289
IncrediMail 2.0 - Buffer Overflow in Authenticate Method via Long String
CVE-2010-5288
EDItran Communications Platform 4.1 R7 - Buffer Overflow
CVE-2010-5194
Viscom Image Viewer <8.0 - Buffer Overflow
CVE-2010-5193
Viscom Image Viewer CP Pro/Gold <8.0-6.0 - Buffer Overflow
Details
Vulnerabilities 14,020
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits