CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,030 vulnerabilities with CWE-119
CVE-2007-2244
Adobe GoLive 9 - Buffer Overflow via Crafted BMP DIB or RLE File
CVE-2007-1748
Windows 2000 Server SP4 and Server 2003 SP1/SP2 - Remote Code Execution via DNS RPC Zone Name Overflow
CVE-2007-2010
bftpd < 1.7.2 - Authenticated Denial of Service via Get or Mget Command
CVE-2007-1993
HP-UX B.11.00 B.11.11 B.11.23 - Remote Code Execution via pfs_mountd.rpc Procedure Call
CVE-2007-1944
IBM WebSphere Application Server < 6.1.0.1 - Denial of Service via JMS Bytebuffer Double Release
CVE-2007-1938
Ichitaro 2005-2007 - Buffer Overflow via Crafted Document
CVE-2007-0734
macOS X 10.3.9-10.4.9 - Memory Corruption via AirPort Disk fsck
CVE-2007-1204
Microsoft Windows XP SP2 - Buffer Overflow
CVE-2007-1819
HP Mercury Quality Center 9.0 - Stack-Based Buffer Overflow via SPIDERLib.Loader ActiveX ProgColor Property
CVE-2007-0038
Microsoft Windows 2000 SP4 through Vista - Remote Code Execution via Animated Cursor RIFF File
CVE-2007-1735
Corel WordPerfect Office X3 13.0.0.565 - Stack-based Buffer Overflow via Long PRS Name
CVE-2007-1709
PHP 5.2.1 - Buffer Overflow in phpDOC Extension via Long Argument String
CVE-2007-1592
Linux Kernel 2.6.x-2.6.21-rc3 - Denial of Service via IPv6 Flow Label Handling
CVE-2007-1579
Atrium MERCUR IMAPD - Stack-based Buffer Overflow via SUBSCRIBE Command
CVE-2007-1580
ftpdmin 0.96 - Denial of Service via LIST Command
CVE-2007-0238
OpenOffice.org < 2.2 and 1.x < 1.1.5 Patch - Remote Code Execution via StarCalc Note Parser
CVE-2007-0348
InterActual Player 2.60.12.0717 - Stack-based Buffer Overflow via ApplicationType Property
CVE-2007-0002
libwpd < 0.8.9 - Heap-Based Buffer Overflow in WP3TablesGroup and WP5DefinitionGroup
CVE-2007-1470
libftp 5.0 - Buffer Overflow via Long Arguments to Multiple Functions
CVE-2007-1413
PHP < 5.2.3 - Buffer Overflow in SNMP Extension via snmpget Function
CVE-2007-0005
Linux kernel < 2.6.21-rc3 - Buffer Overflow in Omnikey CardMan 4040 Driver
CVE-2007-1381
PHP - Buffer Overflow in wddx_deserialize via Malformed STRING Element
CVE-2007-1347
Microsoft Windows Explorer - Denial of Service via Crafted Office File Document Summary
CVE-2007-0712
Apple QuickTime <7.1.5 - Buffer Overflow
CVE-2007-0718
Apple QuickTime <7.1.5 - Buffer Overflow
Details
Vulnerabilities 14,030
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits