CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-4729
Hummingbird Exceed < 13.0 - Stack-Based Buffer Overflow via PlainTextPassword Property
CVE-2008-4726
GoodTech SSH 6.4 - Authenticated Stack-Based Buffer Overflow via SFTP Parameters
CVE-2008-4250 CRITICAL KEV
Microsoft Windows Server Service - Remote Code Execution via Crafted RPC Request
CVSS 9.8
CVE-2008-3863
GNU Enscript <1.6.4 beta - Buffer Overflow
CVE-2008-3862
Trend Micro OfficeScan <8.0.3110 - Buffer Overflow
CVE-2008-2469
libspf2 < 1.2.8 - Remote Code Execution via DNS TXT Record Length Field
CVE-2008-4664
QVOD Player - Heap-Based Buffer Overflow via URL Property
CVE-2008-4654
VLC Media Player 0.9.0-0.9.4 - Stack-Based Buffer Overflow in Ty Demux Plugin
CVE-2008-4652
Dart PowerTCP FTP for ActiveX 2.0.2 - Buffer Overflow via Long SecretKey Property
CVE-2008-4631
MUSCLE < 4.40 - Stack-based Buffer Overflow via Crafted Message
CVE-2008-4473
Adobe Flash CS3 Professional and Flash MX 2004 - Remote Code Execution via Long Control Parameters in SWF File
CVE-2008-4589
Lenovo Rescue and Recovery 4.20 - Heap-Based Buffer Overflow via Long File Name
CVE-2008-4588
Etype Eserv 3.x - Stack-based Buffer Overflow via ABOR Command
CVE-2008-4575
jhead < 2.84 - Buffer Overflow via Long -cmd Argument
CVE-2008-4572
GuildFTPd 0.999.14 - Denial of Service and Possible Remote Code Execution via Long CWD and LIST Arguments
CVE-2008-4038
Microsoft Windows - Remote Code Execution via SMB Filename Length
CVE-2008-4556
Sun Solaris 8 and 9 - Stack-Based Buffer Overflow in adm_build_path Function
CVE-2008-4480
Novell eDirectory 8.x < 8.8.3 and 8.7.3 < 8.7.3.10 - Remote Code Execution via Crafted NCP Opcode 0x24 Message
CVE-2008-4479
Novell eDirectory 8.7.3-8.7.3.9 - Heap-Based Buffer Overflow via SOAP Accept-Language Header
CVE-2008-4555
Graphviz < 2.20.2 - Stack-Based Buffer Overflow via DOT File with Large Number of Agraph_t Elements
CVE-2008-3639
CUPS < 1.3.9 - Remote Code Execution via Malformed SGI Image RLE Data
CVE-2008-4548
Rtssentry - Memory Corruption
CVE-2008-4547
dvrstation_cms - Heap-based Buffer Overflow via TimeSpanFormat Method
CVE-2008-4541
Sun Java System Web Proxy Server 4.0-4.0.7 - Remote Code Execution via FTP Subsystem Heap Overflow
CVE-2008-3544
HP OpenView Network Node Manager <7.51 - Buffer Overflow
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits