CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,030 vulnerabilities with CWE-119
CVE-2007-4440
MercuryS SMTP <4.51 - Buffer Overflow
CVE-2007-4276
IBM DB2 Universal Database < 8.0 and < 9.1 - Stack-Based Buffer Overflow via DASPROF Environment Variable
CVE-2007-4423
IBM DB2 Universal Database 9.1 - Stack-Based Buffer Overflow in AUTH_LIST_GROUPS_FOR_AUTHID
CVE-2007-4391
Yahoo! Messenger 8.1.0.413 - Buffer Overflow
CVE-2007-2223
Microsoft XML Core Services 3.0-6.0 - Remote Code Execution via substringData Integer Overflow
CVE-2007-2224
Microsoft Office and Visual Basic - Remote Code Execution via TextNode substringData Method
CVE-2007-3037
Windows Media Player 7.1, 9, 10, 11 - Remote Code Execution via Crafted Skin File Header
CVE-2007-4337
Streamripper - Buffer Overflow via Long HTTP Location and Server Headers
CVE-2007-4286
Cisco IOS 12.0-12.4 - Remote Code Execution and Denial of Service via NHRP Packet
CVE-2007-3743
Apple Safari < 3.0.3 - Stack-Based Buffer Overflow via Long Bookmark Title
CVE-2007-3744
macOS X 10.4.10 - Remote Code Execution via UPnP IGD Packet
CVE-2007-3911
BakBone NetVault Reporter < 3.5update3 - Remote Code Execution via Long Filename Argument
CVE-2007-4033
t1lib 5.1.1 - Buffer Overflow
CVE-2007-4034
Yahoo! Installer Plugin for Widgets <2007.7.13.3 - Buffer Overflow
CVE-2007-4037
Guidance Software EnCase - Buffer Overflow
CVE-2007-3105
Linux Kernel < 2.6.22 - Stack-Based Buffer Overflow in Random Number Generator
CVE-2007-3333
IBM AIX 5.2.0 and 5.3 SP6 - Remote Code Execution via Terminal Control Sequence Overflow
CVE-2007-4004
IBM AIX <5.3 SP6 & 5.2.0 - Buffer Overflow
CVE-2007-4005
Mike Dubman Windows RSH daemon 1.7 - Buffer Overflow
CVE-2007-3962
fsp/c_library < 0.8 - Remote Code Execution via Long Filename or Directory Entry
CVE-2007-3944
Apple Safari 3 Beta - Remote Code Execution via JavaScript Regular Expression Handling
CVE-2007-3925
Ipswitch IMail Server < 2006.21 - Authenticated Remote Code Execution via IMAP Search Command
CVE-2007-3928
Yahoo! Messenger 8.1 - Authenticated Buffer Overflow via Long Email Address in Address Book Entry
CVE-2007-3832
Trillian - Buffer Overflow via Malformed AIM URI
CVE-2007-3680
IBM AIX 5.2.0 and 5.3.0 - Local Buffer Overflow via ODMPATH Environment Variable
Details
Vulnerabilities 14,030
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits