CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,027 vulnerabilities with CWE-119
CVE-2009-2875
Cisco WebEx WRF Player Buffer Overflow via Crafted WRF File
CVE-2009-3995
Winamp < 5.57 - Remote Code Execution via Crafted Impulse Tracker File
CVE-2009-4313
Microsoft Windows 2000 SP4, XP SP2-SP3, Server 2003 SP2 - Remote Code Execution via Malformed Indeo32 Codec Stream
CVE-2009-4310
Microsoft Windows - Buffer Overflow
CVE-2009-4309
Microsoft Windows - Buffer Overflow
CVE-2009-4124
Ruby 1.9.1 - Heap-Based Buffer Overflow in String Justification Functions
CVE-2009-4292
Internet Initiative Japan SEIL/X1-SEIL/B1 - Buffer Overflow
CVE-2009-0898
HP OpenView Network Node Manager 7.01, 7.51, 7.53 - Remote Code Execution via Crafted HTTP Request
CVE-2009-4181
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2009-4180
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2009-4179
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2009-4178
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2009-4177
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2009-4176
HP OpenView Network Node Manager <7.53 - Buffer Overflow
CVE-2009-3849
HP OpenView Network Node Manager 7.01, 7.51, 7.53 - Remote Code Execution via Long Template or Oid Parameter
CVE-2009-3848
HP OpenView Network Node Manager 7.01, 7.51, 7.53 - Stack-Based Buffer Overflow via Long Template Parameter
CVE-2009-3846
HP OpenView Network Node Manager 7.01, 7.51, 7.53 - Remote Code Execution via Long Userid or Passwd Parameter
CVE-2009-3794
Adobe AIR < 1.5.3 and Flash Player < 10.0.42.34 - Remote Code Execution via Crafted JPEG Dimensions in SWF
CVE-2009-4265
Ideal Administration 2009 <9.7.1 - Buffer Overflow
CVE-2009-4251
Jasc Paint Shop Pro 8.10 - Buffer Overflow
CVE-2009-4240
IBM InfoSphere Information Server 8.1 - Buffer Overflow
CVE-2009-3844
HP OpenView Data Protector 5.50/6.0 - Remote Code Execution via MSG_PROTOCOL Packet
CVE-2009-1569
Novell iPrint Client 4.38, 5.30 - Stack-Based Buffer Overflow via Date and Time Handling
CVE-2009-1568
Novell iPrint Client 5.30 - Stack-based Buffer Overflow via Long Target-Frame Parameter
CVE-2009-1298
Linux Kernel 2.6.29-2.6.32 - Denial of Service via IP Fragment Reassembly
Details
Vulnerabilities 14,027
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits