CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2009-0241
Ganglia 3.1.1 - Stack-based Buffer Overflow via Long Pathname in process_path
CVE-2009-0181
VUPlayer - Buffer Overflow via Long File
CVE-2009-0176
RIM BlackBerry Enterprise Server <4.1.6 - RCE
CVE-2009-0175
Heathco Software MP3 TrackMaker <1.5 - Buffer Overflow
CVE-2009-0174
VUPlayer 2.49 - Remote Code Execution via Long ASF URI in ASX REF Element
CVE-2009-0135
Amarok 1.4.10-2.0.1 - Remote Code Execution via Audible Tag Length Overflow
CVE-2009-0133
Microsoft HTML Help Workshop <4.74 - Buffer Overflow
CVE-2009-0119
Microsoft Windows XP SP3 - Buffer Overflow
CVE-2009-0065
Linux kernel <2.6.28 - Buffer Overflow
CVE-2008-7249
Squid Analysis Report Generator (Sarg) 2.2.3.1 - Buffer Overflow
CVE-2008-3684
EMC Documentum ApplicationXtender < 5.40 - Remote Code Execution via Crafted Packet Data
CVE-2008-7232
xtacacsd < 4.1.2 - Remote Code Execution via Crafted CONNECT TACACS Command
CVE-2008-7227
GeoServer <1.6.1, <1.7.0-beta1 - Unknown Impact
CVE-2008-7225
Foxit Remote Access Server <2.0 Build 3503 - Buffer Overflow
CVE-2008-7224
ELinks < 0.11.4rc0 - Denial of Service via Crafted Link
CVE-2008-7182
NetWin Surgemail <3.9g2 - Buffer Overflow
CVE-2008-7177
Netwide Assembler <2.03.01 - Buffer Overflow
CVE-2008-7174
Jura Internet Connection Kit - Buffer Overflow
CVE-2008-7166
BitTorrent <6.0.1 - Buffer Overflow
CVE-2008-7162
Hero Super Player 3000 - Buffer Overflow
CVE-2008-7103
Najdi.si Toolbar 2.0.4.1 - Stack-Based Buffer Overflow via Document.Location Property
CVE-2008-7079
Nero ShowTime 5.0.15.0 - Buffer Overflow via Long Entry in .M3U Playlist File
CVE-2008-7078
Rumpus < 6.0 - Buffer Overflow via Long HTTP Verb and Authenticated Buffer Overflow via Long FTP Command Arguments
CVE-2008-7031
Foxit Remote Access Server 2.0 Build 3503 - Heap-Based Buffer Overflow via Long SSH Packets
CVE-2008-7015
Unreal Engine 3 - Denial of Service via Large Packet Length
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits