CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-5754
BulletProof FTP Client - Buffer Overflow
CVE-2008-5753
BulletProof FTP Client <2.63 - Buffer Overflow
CVE-2008-4539
KVM < 81 and QEMU < 0.10.0 - Heap-Based Buffer Overflow in Cirrus VGA via VNC Console
CVE-2008-5735
CoolPlayer 2.17-2.19 - Stack-based Buffer Overflow via PlaylistSkin in Skin File
CVE-2008-5722
SAWStudio 3.9i - Buffer Overflow via Preferences File
CVE-2008-5711
Facebook PhotoUploader <5.0.14.0 - Buffer Overflow
CVE-2008-5557
PHP 4.3.0-5.2.6 - Heap-Based Buffer Overflow in mbstring HTML Entity Conversion
CVE-2008-5514
University of Washington c-client <imap-2007e - DoS
CVE-2008-5702
Linux kernel <2.6.28-rc1 - Buffer Overflow
CVE-2008-5691
Phoenician Casino FlashAX <1.0.0.7 - Buffer Overflow
CVE-2008-5078
GNU enscript 1.6.1 - Buffer Overflow via Long Filename in epsf Escape Sequence
CVE-2008-5680
Opera < 9.63 - Remote Code Execution via Crafted Text Area
CVE-2008-5664
Realtek Media Player <1.15.0.0 - Buffer Overflow
CVE-2008-5662
Sun Java Wireless Toolkit (WTK) <2.5.2 - Buffer Overflow
CVE-2008-5616
MPlayer < 1.0_rc1 - Stack-based Buffer Overflow via Malformed TwinVQ File
CVE-2008-5492
VeryDOC PDF Viewer OCX Control <2.0.0.1 - Buffer Overflow
CVE-2008-5419
EMC Control Center <6.0 - Buffer Overflow
CVE-2008-5416
Microsoft SQL Server <9.00.1399.06 - Buffer Overflow
CVE-2008-4837
Microsoft Office Word - Remote Code Execution via Malformed Table Property
CVE-2008-4255
Microsoft Office Frontpage - Memory Corruption
CVE-2008-4028
Microsoft Office - Remote Code Execution via Crafted RTF Drawing Object Tags
CVE-2008-4025
Microsoft Office Word - Remote Code Execution via RTF Polyline/Polygon Point Count Overflow
CVE-2008-3465 CRITICAL
Microsoft Windows < Vista - Buffer Overflow
CVSS 9.8
CVE-2008-5409
BitDefender Antivirus - Denial of Service via Crafted PDF File
CVE-2008-5408
Symantec Backup Exec for Windows Servers <12.5 - Buffer Overflow
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits