CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,028 vulnerabilities with CWE-119
CVE-2008-0529
Cisco Unified IP Phone SCCP Firmware - Authenticated Buffer Overflow via Telnet Command
CVE-2008-0530
Cisco Skinny Client Control Protocol ... - Memory Corruption
CVE-2008-0531
Cisco Skinny Client Control Protocol ... - Memory Corruption
CVE-2008-0778
Apple QuickTime < 7.4.1 - Stack-Based Buffer Overflow via QTPlugin.ocx ActiveX Methods
CVE-2008-0768
IBM Informix Dynamic Server < 10.00.xC8 and 11.10.xC2 - Remote Code Execution via Crafted XDR Requests
CVE-2008-0639
Novell Client 4.91 SP2-SP4 - Stack-based Buffer Overflow via RPC Request
CVE-2008-0763
Larson Network Print Server < 9.4.2 - Remote Code Execution via Long LICENSE Command
CVE-2008-0766
Brooks Remote Print Manager Elite and Select < 4.5.1.11 - Remote Code Execution via Long Filename in LPD Command
CVE-2008-0747
jetAudio Basic < 7.0.5 - Stack-based Buffer Overflow via Long URL in ASX File
CVE-2008-0748
Sony AxRUploadServer ActiveX Control 1.0.0.38 - Buffer Overflow via SetLogging Method
CVE-2008-0080
Microsoft WebDAV Mini-Redirector - Remote Code Execution via Crafted WebDAV Response
CVE-2008-0108
Microsoft Works File Converter - Stack-based Buffer Overflow via Crafted .wps File Field Lengths
CVE-2008-0715
ACDSee Photo Manager 8.1, 9.0, 10.0 - Buffer Overflow via Malformed XBM File
CVE-2008-0725
Titan FTP Server 6.0.5.549 - Heap-Based Buffer Overflow via Long Command
CVE-2008-0671
TinTin++ 1.97.9 - Stack-based Buffer Overflow via Long Chat Message
CVE-2008-0693
Print Manager Plus 7.0.127.16 - Stack-based Buffer Overflow via TCP Port 48101
CVE-2008-0698
IBM DB2 UDB - Buffer Overflow in DAS Server
CVE-2008-0702
Titan FTP Server 6.03 and 6.0.5.549 - Heap-Based Buffer Overflow via USER or PASS Command
CVE-2008-0554
netpbm < 10.26 - Buffer Overflow in readImageData Function
CVE-2008-0659
Aurigma Image Uploader ActiveX Control <= 4.5.70 - Stack-based Buffer Overflow via Action Property
CVE-2008-0660
Aurigma Image Uploader ActiveX Control Stack-Based Buffer Overflow via ExtractExif/ExtractIptc
CVE-2008-0661
dBpowerAMP Audio Player Release 2 - Buffer Overflow via Long URI in .M3U File
CVE-2008-0553
Tcl/Tk < 8.4.17 - Stack-Based Buffer Overflow in ReadImage Function
CVE-2008-0646
Deluge < 0.5.8.3 and libtorrent < 0.12.1 - Denial of Service via Crafted Bencoded Message
CVE-2008-0647
Ourgame GLWorld 2.6.1.29 - Remote Code Execution via HanGamePluginCn18 ActiveX Control
Details
Vulnerabilities 14,028
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits