CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,027 vulnerabilities with CWE-119
CVE-2010-2709
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2010-2932
BarCodeWiz BarCode 3.29 ActiveX Control - Buffer Overflow via LoadProperties Method
CVE-2010-2931
SigPlus Pro ActiveX Control - Stack-Based Buffer Overflow via LCDWriteString Method
CVE-2010-2971
libmikmod <3.1.12 - Buffer Overflow
CVE-2010-2546
libmikmod - Heap-Based Buffer Overflow via Crafted Impulse Tracker File
CVE-2010-2539
MapServer < 4.10.6 and 5.x < 5.6.4 - Denial of Service via msTmpFile Buffer Overflow
CVE-2010-2930
hsolink 1.0.118 - Stack-Based Buffer Overflow via Long Command-Line Arguments
CVE-2010-1792
Apple Safari < 5.0.1 - Remote Code Execution via Crafted Regular Expression
CVE-2010-1789
Apple Safari < 5.0.1 - Remote Code Execution via JavaScript String Object
CVE-2010-1788
Apple Safari < 5.0 - Remote Code Execution via SVG Use Element
CVE-2010-1787
Apple Safari < 5.0.1 - Remote Code Execution via SVG Floating Element
CVE-2010-1785
Apple Safari < 5.0 - Remote Code Execution via SVG Text Pseudo-Element Processing
CVE-2010-1784
Apple Safari < 5.0.1 - Remote Code Execution via CSS Counters
CVE-2010-1783
Apple Safari < 5.0.1 - Remote Code Execution via Dynamic Text Node Modification
CVE-2010-1782
Apple Safari < 5.0 - Remote Code Execution via Inline Element Rendering
CVE-2010-1212
Mozilla Firefox <3.6.7 & Thunderbird <3.1.1 - RCE
CVE-2010-1777
Apple iTunes < 9.2.1 - Remote Code Execution via Crafted itpc: URL
CVE-2010-2902
Google Chrome <5.0.375.125 - Memory Corruption
CVE-2010-2901
Google Chrome <5.0.375.125 - Memory Corruption
CVE-2010-2704
HP OpenView Network Node Manager <7.53 - RCE
CVE-2010-2703
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2010-2523
UMIP 0.4 - Buffer Overflow via Crafted ND_OPT_PREFIX_INFORMATION or ND_OPT_HOME_AGENT_INFO Packet
CVE-2010-2227
Apache Tomcat 5.5.0-5.5.29, 6.0.0-6.0.27, 7.0.0 beta - Denial of Service via Invalid Transfer-Encoding Header
CVE-2010-2702
Unreal Engine 1, 2, and 2.5 - Remote Code Execution via Long LEVEL Field in WELCOME Response
CVE-2010-2701
FathFTP ActiveX control <1.7 - Buffer Overflow
Details
Vulnerabilities 14,027
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits