CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,027 vulnerabilities with CWE-119
CVE-2010-1909
Consona Dynamic Agent, Live Assistance, and Subscriber Assistance - Buffer Overflow via RunCmd Method
CVE-2010-1853
Transmission 1.91 - Stack-Based Buffer Overflow via Crafted Magnet URL
CVE-2010-0829
dvipng 1.11-1.12 - Memory Corruption via Malformed DVI File
CVE-2010-1730
Dolphin Browser 2.5.0 - Denial of Service via Infinite Marquee Loop
CVE-2010-0995
Internet Download Manager <5.19 - Buffer Overflow
CVE-2010-1681
Microsoft Visio - Buffer Overflow via Crafted DXF File
CVE-2010-1686
ABC Backup 5.50 and Urgent Backup 3.20 - Stack-based Buffer Overflow via Crafted ZIP Archive
CVE-2010-1687
Mocha W32 LPD 1.9 - Stack-Based Buffer Overflow via Receive Jobs Request
CVE-2010-1685
CursorArts ZipWrangler 1.20 - Stack-Based Buffer Overflow via Long Filename in ZIP File
CVE-2010-1665
Google Chrome < 4.1.249.1064 - Memory Corruption via Font Handling
CVE-2010-1664
Google Chrome < 4.1.249.1063 - Memory Corruption via HTML5 Media Handling
CVE-2010-1608
IBM Lotus Notes 8.5-8.5fp1 - Stack-based Buffer Overflow
CVE-2010-1597
ZipGenius 6.3.1.2552 - Stack-Based Buffer Overflow via Long Filename in ZIP Entry
CVE-2010-1560
IBM DB2 < 9.1 - Authenticated Denial of Service via REPEAT Function Buffer Overflow
CVE-2010-1278
Adobe Download Manager <9.3 - Buffer Overflow
CVE-2010-0991
imlib2 1.4.3 - Heap-Based Buffer Overflow via Crafted ARGB, XPM, or BMP File
CVE-2010-1033
HP Operations Manager 7.5, 8.10, 8.16 - Stack-Based Buffer Overflow via LoadFile or SaveFile Method
CVE-2010-1458
tweakfs_zip_utility 1.0 - Stack-Based Buffer Overflow via Long Filename in ZIP Archive
CVE-2010-1318
RealNetworks Helix Server < 13.1.1 - Remote Code Execution via Buffer Overflow
CVE-2010-1317
RealNetworks Helix Server/Helix Mobile Server <13 - Buffer Overflow
CVE-2010-1465
Trellian FTP Client <3.1.3.1789 - Buffer Overflow
CVE-2010-0994
Visualization Library <2009.08.812 - Buffer Overflow
CVE-2010-1316
Tembria Server Monitor <5.6.1 - Buffer Overflow
CVE-2010-0480
Microsoft Windows MPEG Layer-3 Audio Codecs - Remote Code Execution via Crafted AVI File
CVE-2010-0479
Microsoft Publisher - Remote Code Execution via Crafted Publisher File
Details
Vulnerabilities 14,027
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits