CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,027 vulnerabilities with CWE-119
CVE-2009-4230
IIPImage Server <0.9.8 - Buffer Overflow
CVE-2009-4227
Xfig < 3.2.5b - Stack-based Buffer Overflow via Malformed .fig File
CVE-2009-4225
PestPatrol <5.6.7.9 - Buffer Overflow
CVE-2009-3994
DevIL 1.7.8 - Stack-Based Buffer Overflow in GetUID Function via Crafted DICOM File
CVE-2009-4219
MyActiveX <1.4.8.0 - Buffer Overflow
CVE-2009-4020
Linux kernel <2.6.32 - Buffer Overflow
CVE-2009-3560
libexpat - Denial of Service via Malformed UTF-8 Sequence Buffer Over-read
CVE-2009-4201
Mp3 Tag Assistant Professional <2.92 - RCE
CVE-2009-4195
Adobe Illustrator <14.0.0 - Buffer Overflow
CVE-2009-4186
Safari 4.0.3 - Denial of Service via Long CSS Background URI
CVE-2009-1567
Lateral Arts Photobox uploader ActiveX control 1.x < 1.3 and 2.2.0.6 - Stack-Based Buffer Overflow
CVE-2009-4171
Yahoo! Messenger 9.0.0.2162 - Denial of Service via YahooBridgeLib.dll RegisterMe Method
CVE-2009-4117
MuPDF <20091125231942 - Buffer Overflow
CVE-2009-4108
XM Easy Personal FTP Server 5.8.0 - DoS
CVE-2009-4107
Invisible Browsing 5.0.52 - Buffer Overflow via Crafted .ibkey File
CVE-2009-4103
Robo-FTP 3.6.17 - Buffer Overflow via FTP Server Response
CVE-2009-4097
Serenity Audio Player <3.2.3 - Buffer Overflow
CVE-2009-3033
Symantec Altiris Deployment Solution Buffer Overflow via AeXNSConsoleUtilities.dll
CVE-2009-3896
nginx 0.1.0-0.4.14 0.5.x<0.5.38 0.6.x<0.6.39 0.7.x<0.7.62 0.8.x<0.8.14 - Denial of Service via Long URI
CVE-2009-4049
avast! Home and Professional 4.8.1356.0 - Memory Corruption
CVE-2009-3895
libexif 0.6.18 - Heap-Based Buffer Overflow in EXIF Tag Fixup Routine
CVE-2009-4006
RhinoSoft Serv-U <9.1.0.0 - Buffer Overflow
CVE-2009-4005
Linux kernel <2.6.32-rc7 - Buffer Under-read
CVE-2009-4004 HIGH
Linux Kernel <2.6.32-rc7 - Memory Corruption
CVSS 7.8
CVE-2009-3977
HP OpenView Network Node Manager <7.53 - Buffer Overflow
Details
Vulnerabilities 14,027
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits