CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,030 vulnerabilities with CWE-119
CVE-2007-1256
Mozilla Firefox 2.0.0.2 - Address Bar Spoofing via Document Location Manipulation
CVE-2007-1245
IrfanView 3.99 - Denial of Service via Malformed WMF File
CVE-2007-1246
MPlayer < 1.0_rc1 - Buffer Overflow in DMO_VideoDecoder_Open
CVE-2007-1217
Linux kernel <2.6.21 - Buffer Overflow
CVE-2007-1218
tcpdump < 3.9.5 - Off-by-One Buffer Overflow in 802.11 Frame Parser
CVE-2007-0009
Mozilla Firefox < 1.5.0.10 and 2.x < 2.0.0.2 - Remote Code Execution via SSLv2 Client Master Key Length Handling
CVE-2007-0776
Mozilla Firefox <2.0.0.2 - Buffer Overflow
CVE-2007-0777
Mozilla Firefox <1.5.0.10/2.x<2.0.0.2, Thunderbird <1.5.0.10, SeaMonkey <1.0.8 - RCE via JS Memory Corruption
CVE-2007-1087
IBM DB2 <8.1-15 & 9.1-2 - Buffer Overflow
CVE-2007-1088
IBM DB2 <8.1 FP15, 9.1 FP2 - Buffer Overflow
CVE-2007-0320
Macrovision InstallFromTheWeb - Remote Code Execution via Crafted HTML Documents
CVE-2007-1083
Verisign Managed PKI Service - Buffer Overflow
CVE-2007-1037
News File Grabber <4.1.0.1 - Buffer Overflow
CVE-2007-1041
S&H Computer Systems News Rover 12.1 Rev 1 - Buffer Overflow
CVE-2007-0325
Trend Micro OfficeScan and Client/Server/Messaging Security - Remote Code Execution via Crafted HTML Document
CVE-2007-0988
PHP 4.0.0-4.4.4 and 5.0.0-5.2.0 - Denial of Service via Unserialize Integer Overflow
CVE-2007-0906
PHP - Multiple Buffer Overflows in Session, ZIP, IMAP, SQLite Extensions and Stream Filters
CVE-2007-0886
Axigen Mail Server 1.2.6-2.0.0b1 - Heap-Based Buffer Underflow via Base64-Encoded POP3 Data
CVE-2007-0790
SmartFTP 2.0.1002 - Buffer Overflow
CVE-2007-0673
BrightStor ARCserve Backup for Laptops & Desktops r11.1 - DoS
CVE-2007-0670
IBM AIX 5.2-5.3 - Buffer Overflow via r-commands
CVE-2007-0464
CFNetwork 129.19 - Denial of Service via Crafted HTTP 301 Response
CVE-2007-0444
Citrix MetaFrame - Stack-based Buffer Overflow in Print Provider Library via Long Arguments
CVE-2007-0018
Altdo Convert Mp3 Master - Memory Corruption
CVE-2007-0460
SUSE Linux < 10.1 - Buffer Overflow in ulogd
Details
Vulnerabilities 14,030
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits