CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,027 vulnerabilities with CWE-119
CVE-2009-3338
EffectMatrix Magic Morph 1.95b - Stack-Based Buffer Overflow via .mor File
CVE-2009-3329
Winplot 1.25.0.1 - Stack-Based Buffer Overflow via Crafted Plot2D File
CVE-2009-3288
Linux kernel 2.6.28-rc1-2.6.31-rc8 - Denial of Service via sg_build_indirect Array Access
CVE-2009-3280
Linux Kernel < 2.6.31 - Denial of Service via Malformed cfg80211 Packets
CVE-2009-2140
Go-oo 2.x-3.x - Remote Code Execution via Crafted EMF+ File
CVE-2009-3254
Ultimate Player 1.56 beta - Remote Code Execution via Long String in Playlist File
CVE-2009-3253
TriceraSoft Swift Ultralite 1.032 - Stack-Based Buffer Overflow via Long String in M3U Playlist File
CVE-2009-3244
Adobe Shockwave Player < 11.5.1.601 - Heap-Based Buffer Overflow via PlayerVersion Property
CVE-2009-3235
Dovecot 1.0-1.0.4 and 1.1-1.1.7 - Stack-Based Buffer Overflow via Sieve Script
CVE-2009-3234
Linux Kernel 2.6.31-rc1 - Buffer Overflow via perf_counter_open System Call
CVE-2009-3221
Audio Lib Player - Stack-based Buffer Overflow via Long URL in .m3u Playlist File
CVE-2009-3214
Photodex ProShow Gold 4.0.2549 - Stack-Based Buffer Overflow via Crafted Slideshow Project File
CVE-2009-3213
broid 1.0 Beta 3a - Stack-Based Buffer Overflow via MP3 File Processing
CVE-2009-3183
OpenSolaris - Heap-based Buffer Overflow
CVE-2009-2807
Apple Mac OS X 10.5.8 - Heap-Based Buffer Overflow in CUPS USB Backend
CVE-2009-3176
Novell iPrint Client 4.38 - Buffer Overflow in ActiveX Control
CVE-2009-3170
AIMP2 Audio Converter < 2.53 - Stack-based Buffer Overflow via Long File1 Argument in Playlist File
CVE-2009-2800
Mac OS X 10.4.11 and 10.5.8 - Buffer Overflow in Alias Manager
CVE-2009-2799
Apple QuickTime < 7.6.4 - Remote Code Execution via Crafted H.264 Movie File
CVE-2009-2798
Apple QuickTime < 7.6.4 - Remote Code Execution via Crafted FlashPix File
CVE-2009-2795
Apple iPhone OS <3.1-3.1.1 - Buffer Overflow
CVE-2009-2206
iPhone OS < 3.1 and iPod touch < 3.1.1 - Remote Code Execution via Crafted AAC or MP3 File
CVE-2009-2203
Apple QuickTime < 7.6.4 - Remote Code Execution via Crafted MPEG-4 Video File
CVE-2009-2205
Java for Mac OS X 10.5 - Buffer Overflow
CVE-2009-2632
Cyrus IMAP Server <2.3.14 & Dovecot <1.1.7 - RCE
Details
Vulnerabilities 14,027
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits