CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-5406
Apple QuickTime Player 7.5.5-8.0.2.20 - Buffer Overflow
CVE-2008-5405
Cain & Abel <4.9.24 - Buffer Overflow
CVE-2008-5403
Trillian <3.1.12.0 - Buffer Overflow
CVE-2008-5401
Trillian < 3.1.12.0 - Remote Code Execution via Long Image Filename in Tooltip
CVE-2008-5395
Linux Kernel < 2.6.28 - Denial of Service via parisc_show_stack Unwind
CVE-2008-5387
IBM AIX 6.1.0-6.1.2 - Buffer Overflow
CVE-2008-5386
IBM AIX 6.1.0-6.1.2 - Buffer Overflow
CVE-2008-5383
National Instruments Electronics Workbench - Buffer Overflow
CVE-2008-5381
ffdshow - Buffer Overflow via URL Processing
CVE-2008-4391
Cisco WVC54GC < 1.25 - Stack-Based Buffer Overflow via NetCamPlayerWeb11gv2 ActiveX Control
CVE-2008-5364
NOS Microsystems getPlus <1.2.2.50 - Buffer Overflow
CVE-2008-5359
Java Runtime Environment <6 - Buffer Overflow
CVE-2008-5358
Java Runtime Environment <6 - Memory Corruption
CVE-2008-5356
Java Runtime Environment <6 - Buffer Overflow
CVE-2008-5354
Java Runtime Environment <6 - Buffer Overflow
CVE-2008-5316
Little cms color engine <1.16 - Buffer Overflow
CVE-2008-5297
No-IP DUC < 2.1.7 - Remote Code Execution via DNS Update Response Buffer Overflow
CVE-2008-5282
W3C Amaya Web Browser 10.0.1 - Buffer Overflow
CVE-2008-5281
Titan FTP Server 6.05 - Buffer Overflow
CVE-2008-5279
Zilab Chat and Instant Messaging Server <2.1 - RCE
CVE-2008-5246
xine-lib < 1.1.15 - Remote Code Execution via ID3 Data in ID3v2 Frame Interpreter
CVE-2008-5245
xine-lib < 1.1.15 - Buffer Overflow in V4L Video Frame Preallocation
CVE-2008-5242
xine-lib < 1.1.15 - Remote Code Execution via Crafted Media File
CVE-2008-5240
xine-lib <1.1.15 - Memory Corruption
CVE-2008-5239
xine-lib <1.1.15 - DoS/Arbitrary Code Execution
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits