CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-1017
Apple QuickTime < 7.4.5 - Remote Code Execution via Clipping Region Atom Handling
CVE-2008-1018
Apple QuickTime < 7.4.5 - Remote Code Execution via MP4A Channel Compositor Atom
CVE-2008-1019
Apple QuickTime < 7.4.5 - Remote Code Execution via Crafted PICT Image
CVE-2008-1020
Apple QuickTime < 7.4.5 - Remote Code Execution via Crafted PICT Image with Kodak Encoding
CVE-2008-1021
Apple QuickTime < 7.4.5 - Remote Code Execution via Crafted Movie with Run Length Encoding
CVE-2008-1022
Apple QuickTime < 7.4.5 - Remote Code Execution via Crafted VR Movie with Zero-Size obji Atom
CVE-2008-1023
Apple QuickTime < 7.4.5 - Remote Code Execution via Crafted PICT Image Clip Opcode
CVE-2008-1373
CUPS 1.3.6 - Buffer Overflow via GIF File with Large Code Size
CVE-2008-0069
XnView < 1.92 - Stack-based Buffer Overflow via Long FontName Parameter in Slideshow File
CVE-2008-1628
Linux Audit < 1.7 - Stack-Based Buffer Overflow in audit_log_user_command
CVE-2008-1610
TallSoft Quick TFTP Server Pro 2.1 - Buffer Overflow
CVE-2008-1611
TFTP Server SP 1.4 - Buffer Overflow
CVE-2008-1601
IBM AIX 5.2-5.3 - Local Privilege Escalation via Stack-Based Buffer Overflow in Reboot Program
CVE-2008-0924
Novell eDirectory < 8.7.3.9 and 8.8.x <= 8.8.1 - Stack-Based Buffer Overflow via Long delRequest LDAP Extended Request
CVE-2008-1490
Aurigma ActiveX 4.1.36.0 - Buffer Overflow
CVE-2008-1491
ASUS Remote Console <2.0.0.19,2.0.0.24 - Buffer Overflow
CVE-2008-1497
NetWin SurgeMail <38k4-4 - Buffer Overflow
CVE-2008-1498
NetWin Surgemail <3.8k4-4 - Buffer Overflow
CVE-2008-1092
Microsoft Jet Database Engine <4.0.9505.0 - RCE
CVE-2008-1488
Alternative PHP Cache (APC) <3.0.16 - Buffer Overflow
CVE-2008-1472
ListCtrl ActiveX Control - Buffer Overflow
CVE-2008-1482
xine-lib <= 1.1.11 - Heap-Based Buffer Overflow via Crafted Media Files
CVE-2008-1461
XnView 1.92.1 - Buffer Overflow via Long Filename Argument
CVE-2008-1289
Asterisk Open Source <1.4.18.1-1.6.0-beta6 - Buffer Overflow
CVE-2008-1403
BootManage TFTPD <1.99 - Buffer Overflow
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits