CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,031 vulnerabilities with CWE-119
CVE-2006-5882
Linksys WPC300N Wireless-N Notebook Adapter Driver - Stack-Based Buffer Overflow via Long SSID in 802.11 Response Frame
CVE-2006-5864
GNU gv 3.6.2 - Stack-based Buffer Overflow via Long Comments in PostScript Headers
CVE-2006-5815
ProFTPD < 1.3.0 - Stack-based Buffer Overflow in sreplace Function
CVE-2006-5758
Microsoft Windows 2000 through SP4 and XP through SP2 - Privilege Escalation via GDI Kernel Structure Memory Remapping
CVE-2006-5710
macOS 10.4.8 - Remote Code Execution via Malformed 802.11 Probe Response Frame
CVE-2006-5646
Sophos Anti-Virus and Endpoint Security < 6.0.5 - Heap-Based Buffer Overflow via CHM LZX Decompression
CVE-2006-5647
Sophos Anti-Virus and Endpoint Security < 6.0.5 - Remote Code Execution via Malformed CHM File
CVE-2006-5601
xsupplicant < 1.2.6 - Authenticated Stack-Based Buffer Overflow in eap_do_notify
CVE-2006-5552
RevilloC MailServer <= 1.21 - Remote Code Execution via Long MAIL FROM or RCPT TO Argument
CVE-2006-5478
Novell eDirectory 8.x-8.8.x - Remote Code Execution via Long HTTP Host Header or Dot in Username
CVE-2006-5456
GraphicsMagick < 1.1.7 - Buffer Overflow in DCM and PALM Image Parsing
CVE-2006-4819
Opera 9.0-9.01 - Remote Code Execution via Long URL in Tag
CVE-2006-5142
CA BrightStor ARCserve Backup <R11.5 - Buffer Overflow
CVE-2006-5143
CA BrightStor ARCserve Backup <r11.5 SP1 - RCE
CVE-2006-5176
MailEnable Professional and Enterprise 2.0 - Remote Code Execution via NTLM Type 1 Message Signature Field
CVE-2006-5177
MailEnable Professional/E 2.0 - RCE/DoS
CVE-2006-3738
OpenSSL 0.9.7-0.9.7k and 0.9.8-0.9.8c - Buffer Overflow via Long Cipher List
CVE-2006-4868
Microsoft Outlook & IE 6.0 - Buffer Overflow
CVE-2006-4565
Firefox/Thunderbird <1.5.0.7, SeaMonkey <1.0.5 - Heap Overflow via JS Regex
CVE-2006-4776
Cisco IOS 12.1(19) - Remote Code Execution via VTP VLAN Name Overflow
CVE-2006-4777
Internet Explorer 6.0 SP1 - Buffer Overflow
CVE-2006-0001
Microsoft Publisher <2004 - Buffer Overflow
CVE-2006-2482
ZipTV for C++ Builder and Delphi 7 - Heap-based Buffer Overflow via ARJ Archive with Long Header
CVE-2006-4146
GNU GDB 6.5 - Buffer Overflow in DWARF and DWARF2 Debugging Code
CVE-2006-4431
Zend Platform < 2.2.1a - Remote Code Execution via PHP Session Identifier
Details
Vulnerabilities 14,031
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits