CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,027 vulnerabilities with CWE-119
CVE-2009-3976
Labtam ProFTP 2.9 - Buffer Overflow
CVE-2009-3969
Faslo Player 7.0 - Stack-Based Buffer Overflow via Long String in M3U Playlist File
CVE-2009-3947
Tandberg MXP F7.0 - Buffer Overflow
CVE-2009-3938
Poppler <0.10.6, 0.12.0 - Buffer Overflow
CVE-2009-3130
Microsoft Office Excel - Remote Code Execution via Malformed BIFF Record
CVE-2009-3135
Microsoft Office Word - Remote Code Execution via Malformed File Information Block
CVE-2009-2837
Mac OS X - Remote Code Execution via Crafted PICT Image
CVE-2009-2833
Apple Mac OS X 10.5.8 - Buffer Overflow in UCCompareTextDefault API
CVE-2009-2832
Apple Mac OS X Server < 10.6.1 - Buffer Overflow via FTP CWD Command
CVE-2009-2830
Apple Mac OS X 10.6.x < 10.6.2 - Buffer Overflow via Crafted CDF File
CVE-2009-2827
Apple Mac OS X 10.5.8 - Heap-Based Buffer Overflow in Disk Images via Crafted FAT Filesystem
CVE-2009-2824
Apple Mac OS X 10.5.8 - Remote Code Execution via Crafted Embedded Font
CVE-2009-3924
Soldier of Fortune II - Buffer Overflow
CVE-2009-2685
HP Power Manager - Stack-based Buffer Overflow via Login Variable
CVE-2009-3878
Sun Java System Web Server 7.0 Update 6 - Buffer Overflow
CVE-2009-3873
Sun Java SE <5.0 Update 22 - Privilege Escalation
CVE-2009-3871
Sun JDK and JRE - Remote Code Execution via setBytePixels Heap Overflow
CVE-2009-3869
Sun Java JRE AWT setDiffICM Buffer Overflow
CVE-2009-3868
Sun Java SE <5.0 Update 22 - Privilege Escalation
CVE-2009-3867
Sun Java JRE getSoundbank file:// URI Buffer Overflow
CVE-2009-3863
Novell Groupwise Client 7.0.3.1294 - Buffer Overflow
CVE-2009-3861
SafeNet SoftRemote <10.8.9 - Buffer Overflow
CVE-2009-3859
eEye Retina WiFi Scanner <1.0.8.68 - Buffer Overflow
CVE-2009-3857
Softonic International SciTE 1.72 - Buffer Overflow
CVE-2009-3854
IBM Tivoli Storage Manager 5.3-5.3.6.6 and 5.4-5.4.1 - Remote Code Execution via Buffer Overflow
Details
Vulnerabilities 14,027
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits