CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-1878
xine-lib < 1.1.12 - Stack-based Buffer Overflow via Long NSF Title
CVE-2008-0320
OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow
CVE-2008-1026
Safari - Remote Code Execution via PCRE Regular Expression Integer Overflow
CVE-2008-1865
openMosix - Stack-based Buffer Overflow in msx_readnode Function
CVE-2008-0314
ClamAV 0.92.1 - Remote Code Execution via Crafted PeSpin Packed PE Binary
CVE-2008-1833
ClamAV 0.92.1 - Remote Code Execution via Crafted WWPack Compressed PE Binary
CVE-2008-0962
EMC DiskXtender 6.20.060 - Authenticated Stack-Based Buffer Overflow via RPC Interface
CVE-2008-1100
ClamAV 0.92-0.92.1 - Remote Code Execution via Crafted Upack PE File
CVE-2008-1724
SecureTransport Server <4.6.1 - Buffer Overflow
CVE-2008-1703
TIBCO Software Rendezvous <8.1.0 - Buffer Overflow
CVE-2008-1704
TIBCO Software EMS <4.4.3 & iProcess Engine 10.6.0-10.6.1 - RCE
CVE-2008-1720
rsync 2.6.9-3.0.1 - Remote Code Execution via Extended Attribute Buffer Overflow
CVE-2008-0066
Autonomy KeyView - Buffer Overflow via HTML Document with Large Data or Long URL
CVE-2008-1101
Autonomy (formerly Verity) KeyView - Buffer Overflow
CVE-2008-1718
Autonomy KeyView - Buffer Overflow via Crafted MIME Text Attachment
CVE-2008-1709
Microsoft Visual InterDev 6.0 (SP6) - Buffer Overflow
CVE-2008-1083 HIGH
Microsoft Windows - Buffer Overflow
CVSS 8.1
CVE-2008-1087
Microsoft Windows - Buffer Overflow
CVE-2008-0312
Symantec Norton Products - Stack-Based Buffer Overflow via AutoFix Support Tool ActiveX Control
CVE-2008-1697
HP OpenView Network Node Manager <7.53-7.51 - Buffer Overflow
CVE-2008-1328
CA ARCserve Backup - Buffer Overflow
CVE-2008-0311
Borland CaliberRM 2006 - Stack-Based Buffer Overflow in StarTeam Multicast Service
CVE-2008-1602
Orbit Downloader <2.6.4 - Buffer Overflow
CVE-2008-1685
GCC 4.2.0-4.3.0 - Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2008-1015
Apple QuickTime < 7.4.5 - Remote Code Execution via Data Reference Atom Handling
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits