CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,030 vulnerabilities with CWE-119
CVE-2007-6009
ACDSee Photo Editor - Buffer Overflow via XBM or XPM File Processing
CVE-2007-4267
Apple Mac OS X <10.4.11 - Buffer Overflow
CVE-2007-4681
Apple Mac OS X <10.5 - Buffer Overflow
CVE-2007-4684
macOS 10.4-10.4.10 - Local Arbitrary Code Execution via i386_set_ldt System Call
CVE-2007-5755
AOL Radio AmpX ActiveX Control - Remote Code Execution via Stack-Based Buffer Overflow
CVE-2007-5941
Adobe Shockwave Player - Stack-based Buffer Overflow via ShockwaveVersion Method
CVE-2007-5935
teTeX and TeXlive 2007 - Stack-Based Buffer Overflow via DVI File Href Tag
CVE-2007-5937
teTeX/TeXlive <2007 - Buffer Overflow
CVE-2007-5909
Autonomy KeyView Viewer SDK <9.2.0.12 - RCE
CVE-2007-5910
Autonomy KeyView Viewer <9.2.0.12 - Buffer Overflow
CVE-2007-5911
Viewpoint Media Player 3.2 - Remote Code Execution via AxMetaStream ActiveX Control Buffer Overflow
CVE-2007-5928 HIGH
OpenBase <10.0.5 - Memory Corruption
CVSS 8.1
CVE-2007-5929
OpenBase < 10.0.5 - Authenticated Remote Code Execution via Long Stored Procedure Name
CVE-2007-5904
Linux kernel <2.6.23 - Buffer Overflow
CVE-2007-5897
Oracle Database Server <10.1.0.4 - Buffer Overflow
CVE-2007-4517
Oracle Database Server - Authenticated Buffer Overflow in XDB_PITRIG_PKG.PITRIG_DROPMETADATA Procedure
CVE-2007-5392
Xpdf - Remote Code Execution via Integer Overflow in DCTStream::reset
CVE-2007-5393
xpdf - Heap-Based Buffer Overflow in CCITTFaxStream::lookChar
CVE-2007-5395
Link Grammar 4.1b - Stack-based Buffer Overflow via Long Word in Tokenize Function
CVE-2007-5892
SSReader 4.0 and earlier - Stack-based Buffer Overflow via pdg2.dll ActiveX Register Method
CVE-2007-1659
PCRE < 7.3 - Denial of Service and Possible Remote Code Execution via Unmatched \Q\E Sequences
CVE-2007-1660
PCRE < 6.9 - Buffer Overflow via Character Class Size Calculation
CVE-2007-3750
Apple QuickTime < 7.3 - Remote Code Execution via Crafted STSD Atoms
CVE-2007-4672
Apple QuickTime <7.3 - Buffer Overflow
CVE-2007-4675
Apple QuickTime <7.3 - Buffer Overflow
Details
Vulnerabilities 14,030
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits