CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-5236
xine-lib < 1.1.5 - Remote Code Execution via Heap-Based Buffer Overflow
CVE-2008-5235
xine < 1.1.15 - Remote Code Execution via Crafted Real Media File
CVE-2008-5234
xine-lib < 1.1.15 - Remote Code Execution via Crafted Metadata Atom Size and ID3v2 Frame
CVE-2008-5233
xine-lib < 1.1.15 - Denial of Service via Crafted Media File
CVE-2008-5231
Novell iPrint Client <5.06 - Buffer Overflow
CVE-2008-2431
Novell iPrint < 5.06 - Remote Code Execution via Multiple ActiveX Control Buffer Overflows
CVE-2008-5229
Microsoft Windows Vista Gold & SP1 - Buffer Overflow
CVE-2008-4829
Streamripper 1.63.5 - Remote Code Execution via HTTP Header or Playlist Parsing
CVE-2008-5187
imlib2 1.4.2 - Heap-Based Buffer Overflow via Crafted XPM File
CVE-2008-5178
Opera 9.62 - Remote Code Execution via Long file:// URI
CVE-2008-5177
Yosemite Backup 8.7 - Buffer Overflow
CVE-2008-5176
WinCom LPD Total <3.0.2.623 - Buffer Overflow
CVE-2008-5134
Linux Kernel < 2.6.27.5 - Buffer Overflow in libertas lbs_process_bss
CVE-2008-5120
HP OpenVMS 8.3 - Stack-Based Buffer Overflow in MultiNet Finger Service
CVE-2008-5025
Linux Kernel < 2.6.28 - Stack-Based Buffer Overflow in HFS Catalog Namelength Handling
CVE-2008-0014
Trend Micro ServerProtect <5.58 - Buffer Overflow
CVE-2008-0013
Trend Micro ServerProtect <5.58 - Buffer Overflow
CVE-2008-0012
Trend Micro ServerProtect <5.58 - Buffer Overflow
CVE-2008-5106
KarjaSoft Sami FTP Server 2.0.x - Buffer Overflow via Long Command Argument
CVE-2008-5101
OptiPNG 0.6 and 0.6.1 - Buffer Overflow in BMP Reader
CVE-2008-3623
Apple Safari <3.2 - Buffer Overflow
CVE-2008-5094
Novell eDirectory < 8.8 SP3 - Heap-Based Buffer Overflow
CVE-2008-5092
Novell eDirectory < 8.8 SP3 - Heap-Based Buffer Overflow via HTTP Header Parsing
CVE-2008-5091
Novell eDirectory < 8.8 - Denial of Service via Invalid ExtensibleMatch Filter
CVE-2008-5073
Novell ZENworks Desktop Management 6.5 - Remote Code Execution via CanUninstall Method
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits