CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,030 vulnerabilities with CWE-119
CVE-2007-4676
Apple QuickTime <7.3 - Buffer Overflow
CVE-2007-4677
Apple QuickTime <7.3 - Buffer Overflow
CVE-2007-4768
PCRE < 6.0 - Heap-Based Buffer Overflow via Singleton Unicode Sequence in Regex Character Class
CVE-2007-5116
Perl 5.8 - Buffer Overflow in Regular Expression Engine via UTF Character Switch
CVE-2007-5603
SonicWall SSL-VPN < 2.1 - Stack-Based Buffer Overflow via NetExtender NELaunchCtrl AddRouteEntry Method
CVE-2007-5814
SonicWall SSL-VPN NetExtender <2.1.0.51, <2.5.0.56 - Buffer Overflow
CVE-2007-5807
Ultra Star Reader - Buffer Overflow
CVE-2007-4217
IBM AIX 5.2-5.3 - Stack-based Buffer Overflow in ftp domacro Function
CVE-2007-4513
IBM AIX 5.2-5.3 - Local Privilege Escalation via Stack-Based Buffer Overflow in lqueryvg/lquerypv
CVE-2007-4621
IBM AIX 5.2 - Buffer Overflow via Long Command Line Arguments
CVE-2007-4623
IBM AIX 5.2-5.3 - Stack-based Buffer Overflow via bellmail sendrmt Function
CVE-2007-5767
Novell BorderManager < 3.8 - Remote Code Execution via Malformed Tree Name Validation Request
CVE-2007-5197
Mono < 1.2.5.1 - Buffer Overflow in BigInteger Montgomery-based Pow Methods
CVE-2007-5779
GOM Player 2.1.6.3499 - Buffer Overflow via GomWeb Control OpenUrl Method
CVE-2007-5788
Grandstream HT-488 0.1 - Denial of Service via SIP INVITE Message Buffer Overflow
CVE-2007-2263
RealNetworks RealPlayer and RealOne Player - Remote Code Execution via Malformed SWF Record Headers
CVE-2007-2264
RealNetworks RealPlayer and RealOne Player - Heap-based Buffer Overflow via RAM File Header
CVE-2007-4345
IPSwitch IMail Client 9.22 - Buffer Overflow via Long MIME Boundary Parameter
CVE-2007-4599
RealNetworks RealPlayer <10.5-<2 - Buffer Overflow
CVE-2007-5081
RealNetworks RealPlayer and RealOne Player - Remote Code Execution via Crafted RM File
CVE-2007-4277
Trend Micro AntiVirus <8.550-1001 - Privilege Escalation
CVE-2007-5729
QEMU 0.8.2 - Heap-Based Buffer Overflow via NE2000 Ethernet Frame MTU Bypass
CVE-2007-5722
GlobalLink 2.7.0.8 - Stack-Based Buffer Overflow via GLChat.ocx ConnectAndEnterRoom Method
CVE-2007-5723
nufw < 2.2.7 - Heap-Based Buffer Overflow via Base64 Encoding
CVE-2007-5709
Sony SonicStage CONNECT Player 4.3 - Stack-based Buffer Overflow via M3U File Name
Details
Vulnerabilities 14,030
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits