CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,027 vulnerabilities with CWE-119
CVE-2009-3958
NOS Microsystems getPlus Helper <1.6.2.49 - Buffer Overflow
CVE-2009-3637
Alien Arena 7.30 - Remote Code Execution via Crafted Server Description Packet
CVE-2009-4486
Novell iManager <2.7.3 - Buffer Overflow
CVE-2009-4009
PowerDNS Recursor <3.1.7.2 - Buffer Overflow
CVE-2009-3952
Adobe Illustrator < 13.0.3 - Buffer Overflow
CVE-2009-4588
WindsPlayerIE.View.1 - Buffer Overflow
CVE-2009-4553
iRehearse - Stack-based Buffer Overflow via .m3u Playlist File
CVE-2009-4549
A2 Media Player Pro 2.51 - Buffer Overflow
CVE-2009-4501
Zabbix < 1.6.8 - Denial of Service via Missing Separators in Request
CVE-2009-4500
Zabbix < 1.6.6 - Denial of Service via Crafted Request
CVE-2009-4482
TVersity 1.6 - Remote Code Execution via Buffer Overflow in MediaServer.exe
CVE-2009-4480
AzeoTech DAQFactory <5.77 - Buffer Overflow
CVE-2009-4476
HAURI ViRobot Desktop <5.5 - Buffer Overflow
CVE-2009-4462
NetBiterConfig <1.3.0 - Buffer Overflow
CVE-2009-4420
F5 Networks BIG-IP ASM/PSM <10.0.2 - Buffer Overflow
CVE-2009-4376
Wireshark 1.2.0-1.2.4 - Buffer Overflow in Daintree SNA File Parser
CVE-2009-4362
IBM AIX 6.1 - Buffer Overflow via Long String Arguments
CVE-2009-4361
IBM AIX 6.1 - Buffer Overflow via Long String Argument in qoslist
CVE-2009-4270
Ghostscript <8.70 - Buffer Overflow
CVE-2009-3996
Winamp < 5.57 - Remote Code Execution via Ultratracker File
CVE-2009-2880
Cisco WebEx WRF Player Buffer Overflow via Crafted WRF File
CVE-2009-2879
Cisco WebEx WRF Player Remote Code Execution via Crafted WRF File
CVE-2009-2878
Cisco WebEx WRF Player Remote Code Execution via Crafted WRF File
CVE-2009-2877
Cisco WebEx WRF Player Stack-Based Buffer Overflow via Crafted WRF File
CVE-2009-2876
Cisco WebEx WRF Player Remote Code Execution via Crafted WRF File
Details
Vulnerabilities 14,027
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits