CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,030 vulnerabilities with CWE-119
CVE-2007-4476
GNU tar < 1.19 - Buffer Overflow in safer_name_suffix
CVE-2007-4657
PHP <4.4.8 & <5.2.4 - Info Disclosure/DoS
CVE-2007-4661
PHP 5.2.3 - Heap-Based Buffer Overflow in chunk_split Function
CVE-2007-4662
PHP < 5.2.3 - Buffer Overflow in php_openssl_make_REQ
CVE-2007-4664
Firebird < 2.0.1 - Buffer Overflow in Database Attach and Create Functionality
CVE-2007-4665
Firebird < 2.0.1 - Denial of Service via Multiple Simultaneous Event Registration Requests
CVE-2007-4666
Firebird < 2.0.1 - Denial of Service via Large Network Packets
CVE-2007-4668
Firebird < 2.0.1 - Unauthenticated Arbitrary File Existence Disclosure
CVE-2007-4635
Yahoo! Messenger 8.1.0.209 and 8.1.0.402 - Denial of Service via File-Transfer Packet
CVE-2007-4642
Doomsday 1.9.0-beta5.1 - Buffer Overflow
CVE-2007-4643
Doomsday < 1.9.0_beta5.1 - Denial of Service via PKT_CHAT Packet Integer Underflow
CVE-2007-4648
Norman Virus Control <5.82 - Privilege Escalation
CVE-2007-2931
Microsoft MSN Messenger <7.5 - Buffer Overflow
CVE-2007-2954
Novell Client 4.91 SP2-SP4 - Remote Code Execution via Spooler Service RPC Requests
CVE-2007-4515
Yahoo! services suite - Buffer Overflow
CVE-2007-4629
MapServer <4.10.3 - Buffer Overflow
CVE-2007-4607
Quiksoft EasyMail SMTP Object <6.0.1 - Buffer Overflow
CVE-2007-4221
Motorola Timbuktu Pro <8.6.5 - Buffer Overflow
CVE-2007-4582
ACTi Network Video Recorder SP2 2.0 - Remote Code Execution via nvUnifiedControl.AUnifiedControl.1 SetText Method
CVE-2007-4584
BitchX 1.1 Final - Remote Code Execution via MODE Command Buffer Overflow
CVE-2007-4586
PHP < 5.2.0 - Buffer Overflow in iisfunc Extension via Long String Argument
CVE-2007-4561
Helix DNA Server <11.1.4 - Buffer Overflow
CVE-2007-4566
Alpha Centauri Software SIDVault <2.0f - RCE
CVE-2007-4549
ALPass 2.7 and 3.02 - Buffer Overflow via Crafted APW File
CVE-2007-4218
Trend Micro ServerProtect <5.58 SP4 - RCE
Details
Vulnerabilities 14,030
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits