CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-3146
Wireshark 0.9.7-1.0.2 - Buffer Overflow via NCP Packet Handling
CVE-2008-2928
Red Hat Directory Server 7.1 - Buffer Overflow via Accept-Language HTTP Header
CVE-2008-3480
Anzio WePO <3.2.19-3.2.24 - Buffer Overflow
CVE-2008-3853
IBM DB2 <9.1 FP4a, 9.5 FP1 - Buffer Overflow
CVE-2008-3854
IBM DB2 <9.1 Fixpak 5 - IBM DB2 <9.5 Fixpak 1 - Buffer Overflow
CVE-2008-2327
libtiff < 3.8.2 - Buffer Underflow in LZW Decoder
CVE-2008-3795
Ipswitch WS_FTP Home - Buffer Overflow
CVE-2008-3733
EO Video 1.36 - Stack-Based Buffer Overflow via Long Name Element in ProjectElement
CVE-2008-3705
EchoVNC Linux <1.1.2 - Buffer Overflow
CVE-2008-3704
Microsoft Visual Studio <6.0.84.18 - Buffer Overflow
CVE-2008-2234
Openwsman 1.2.0 and 2.0.0 - Remote Code Execution via Crafted Authorization Header
CVE-2008-3702
JComSoft AniGIF.ocx <2.47 - Buffer Overflow
CVE-2008-3658
PHP <4.4.9, <5.2.6-r6 - Buffer Overflow
CVE-2008-3659
PHP <4.4.9 & 5.2.6-5.6 - Buffer Overflow
CVE-2008-3687
Xen 3.3 - Heap-Based Buffer Overflow via flask_op Hypercall
CVE-2008-3338
TIBCO Hawk < 4.8.0 - Remote Code Execution via Crafted Message
CVE-2008-3667
Maxthon Browser <2.0 - Buffer Overflow
CVE-2008-2245
Windows 2000/XP/Server 2003 - Remote Code Execution via Crafted Image File
CVE-2008-3606
Qbik WinGate <6.2.2.1137 - Buffer Overflow
CVE-2008-3576
OpenTTD < 0.6.2 - Buffer Overflow in TruncateString Function
CVE-2008-3577
OpenTTD < 0.6.2 - Buffer Overflow via Large Filename in -g Parameter
CVE-2008-3583
IntelliTamper - Buffer Overflow via Long URL in IMG SRC Attribute
CVE-2008-2377
GnuTLS 2.3.5-2.4.0 - Use-After-Free in Handshake Hash Buffer Clear
CVE-2008-3558
Cisco WebEx Meeting Manager <20.2008.2606.4919 - Buffer Overflow
CVE-2008-0964
OpenSolaris and Solaris 8-10 - Remote Code Execution via Crafted SMB Packet
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits