CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-1581
Apple QuickTime <7.5 - Buffer Overflow
CVE-2008-1583
Apple QuickTime <7.5 - Buffer Overflow
CVE-2008-1584
Apple QuickTime <7.5 - Buffer Overflow
CVE-2008-1673
Linux kernel <2.4.36.6 & 2.6 <2.6.25.5 - DoS/Code Injection
CVE-2008-2573
freeSSHd 1.2.1 - Authenticated Stack-Based Buffer Overflow via SSH_FXP_OPENDIR Command
CVE-2008-1518
Kaspersky Anti-Virus <7.0 - Buffer Overflow
CVE-2008-2097
VMware ESX and ESXi 3.5 - Authenticated Buffer Overflow via Invalid Content-Length
CVE-2008-2100
VMware ACE - Buffer Overflow
CVE-2008-2542
NASA Ames Research Center BigView 1.8 - Stack-Based Buffer Overflow via Crafted PNM File
CVE-2008-1108
Evolution 2.22.1 - Buffer Overflow via iCalendar Timezone String
CVE-2008-1109
Evolution 2.22.1 - Heap-Based Buffer Overflow via iCalendar DESCRIPTION Property
CVE-2008-2404
SUN Java Asp Server < 4.0.2 - Memory Corruption
CVE-2008-2541
CA eTrust Secure Content Manager 8.0 - Remote Code Execution via Long FTP Responses
CVE-2008-1661
HP StorageWorks SWSM <4.5 SP2 - Buffer Overflow
CVE-2008-2547
Windows Installer - Stack-based Buffer Overflow via Long GUID in /x Option
CVE-2008-2548
Motorola RAZR - Stack-Based Buffer Overflow in EXIF JPEG Thumbprint Parser
CVE-2008-1031
Mac OS X - Remote Code Execution via Crafted PDF Document
CVE-2008-1573
Apple Mac OS X <10.5.3 - Info Disclosure
CVE-2008-1574
Mac OS X - Remote Code Execution via JPEG2000 Image Parsing
CVE-2008-2098
VMware Workstation, Player, ACE, and Fusion - Heap-Based Buffer Overflow in HGFS via Folder Sharing
CVE-2008-2099
VMware Workstation 6 < 6.0.4, VMware Player 2 < 2.0.4, VMware ACE 2 < 2.0.2 - Arbitrary Code Execution via VMCI
CVE-2008-2363
Pan < 0.132 - Heap-Based Buffer Overflow via Crafted NZB File
CVE-2008-2426
imlib2 1.4.0 - Stack-Based Buffer Overflow via PNM or XPM Image Header
CVE-2008-2513
IBM AIX 5.2, 5.3, 6.1 - Local Buffer Overflow
CVE-2008-2514
IBM AIX 5.2, 5.3, 6.1 - Buffer Overflow in errpt
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits