CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-1802
rdesktop 1.5.0 - Remote Code Execution via RDP Redirect Request Length Fields
CVE-2008-2085
SIPp 3.1 - Stack-Based Buffer Overflow via Crafted SIP Message
CVE-2008-2080
NASA Goddard Space Flight Center Common Data Format < 3.2.1 - Stack-Based Buffer Overflow via Crafted Length Tags
CVE-2008-2050
PHP < 5.2.6 - Stack-Based Buffer Overflow in FastCGI SAPI
CVE-2008-2069
Novell GroupWise 7 - Buffer Overflow via Long Argument in mailto: URI
CVE-2008-2040
Peercast 0.1218 - Stack-based Buffer Overflow in HTTP Basic Authentication
CVE-2008-2021
lhaplus < 1.56 - Remote Code Execution via Long Comment Field in ZOO Archive
CVE-2008-2008
Cerulean Studios Trillian Basic/Pro <3.1.9.0 - Buffer Overflow
CVE-2008-2001
Apple Safari 3.1.1 - Denial of Service via Malformed file:///%E2 Link
CVE-2008-1670
KDE 4.0.x-4.0.3 - Heap-Based Buffer Overflow in PNG Image Loader
CVE-2008-1994
Acon 1.0.5-5-1.0.5-7 - Stack-Based Buffer Overflow via HOME Environment Variable or Terminal Columns
CVE-2008-1966
IBM DB2 - Authenticated Denial of Service via JAR File Administration Routines
CVE-2008-1973
SubEdit Player <4066 - Buffer Overflow
CVE-2008-1959
SIPp 3.0 - Stack-based Buffer Overflow via Crafted SIP Message
CVE-2008-1964
xine-lib - Stack-based Buffer Overflow in NSF Header Copyright Field
CVE-2008-1768
VLC < 0.8.6f - Denial of Service via Integer Overflow in MP4 Demuxer, Real Demuxer, and Cinepak Codec
CVE-2008-1925
InspIRCd < 1.1.18 - Denial of Service via Crafted Nicknames in Namesx and Uhnames Modules
CVE-2008-1928
Imager 0.42-0.63 - Denial of Service via Image Fill Channel Mismatch
CVE-2008-1765
Adobe Photoshop Album Starter Edition 3.2 - Buffer Overflow
CVE-2008-1920
ICQ 6.0 build 6043 - Buffer Overflow
CVE-2008-1102
Blender 2.45 - Stack-Based Buffer Overflow via Crafted Radiance RGBE Image
CVE-2008-1910
Borland InterBase 2007 SP2 - Buffer Overflow
CVE-2008-1912
DivX Player <6.7.0.22 - Buffer Overflow
CVE-2008-1914
BigAnt IM Server <2.2 - Buffer Overflow
CVE-2008-1881
VLC - Stack-based Buffer Overflow in SSA Subtitle Parser
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits