CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2009-1129
Microsoft Office PowerPoint 2000/2002/2003 SP3 - RCE via PP7X32.DLL Buffer Overflow
CVE-2009-0227
Microsoft Office PowerPoint <2003 SP3 - Buffer Overflow
CVE-2009-0226
Microsoft Office PowerPoint <4.2 - Buffer Overflow
CVE-2009-0220
Microsoft Office PowerPoint <2003 SP3 - RCE
CVE-2009-1627
Streaming Download Project Downloader 2.3.0 - Remote Code Execution via Long ASF URL in ASX File
CVE-2009-1612
Baofeng Storm - Stack-based Buffer Overflow via OnBeforeVideoDownload Method
CVE-2009-1611
ElectraSoft 32bit FTP 09.04.24 - Remote Code Execution via Long CWD Reply
CVE-2009-1608
Microchip MPLAB IDE 8.30 - Buffer Overflow via .MCP Project File
CVE-2009-1606
Dafolo DafoloControl 1.108.6.195 - Remote Code Execution via Long Property Values
CVE-2009-1605 MEDIUM
SumatraPDF < 0.9.3 - Remote Code Execution via Crafted PDF File
CVSS 5.4
CVE-2009-1602
Quick 'n Easy Mail Server 3.3 - Denial of Service via Long SMTP Commands
CVE-2009-1592
ElectraSoft 32bit FTP 09.04.24 - Stack-based Buffer Overflow via Long FTP Banner
CVE-2009-1586
GrabIt < 1.7.2 Beta 3 - Stack-Based Buffer Overflow via NZB File DTD Reference
CVE-2009-1577
cscope < 15.6 - Stack-Based Buffer Overflow via Long Function Name or Symbol
CVE-2009-1441
Google Chrome < 1.0.154.64 - Heap-Based Buffer Overflow in ParamTraits<SkBitmap>::Read
CVE-2009-1490
Sendmail < 8.13.2 - Heap-Based Buffer Overflow via Long X- Header
CVE-2009-1520
IBM Tivoli Storage Manager Client Buffer Overflow in Web GUI
CVE-2009-0148
cscope - Buffer Overflow via Long Source-Code Tokens or Pathnames
CVE-2009-1516
IceWarp Merak Mail Server 9.4.1 - Stack-Based Buffer Overflow via Base64FileEncode Method
CVE-2009-1515
file 5.00 - Heap-Based Buffer Overflow in cdf_read_sat Function
CVE-2009-1513
libmodplug < 0.8.7 - Buffer Overflow in PATinst Function
CVE-2009-1497
Gretech Online Movie Player (GOM Player) 2.1.16.4635 - Stack-based Buffer Overflow via SRT File
CVE-2009-1291
TIBCO SmartSockets <6.8.2, RTworks <4.0.5, EMS 4.0.0-5.1.1 Stack Overflow via Inbound Data
CVE-2009-0663
DBD::Pg 1.49 - Heap-Based Buffer Overflow via getline and pg_getline Functions
CVE-2009-1430
Symantec AntiVirus and Client Security - Remote Code Execution via Crafted Packet
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits