CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,031 vulnerabilities with CWE-119
CVE-2005-1812
FutureSoft TFTP Server Evaluation Version 1.0.0.1 - Remote Code Execution via Long Filename or Transfer Mode String
CVE-2005-1770
Avast Antivirus - Local Buffer Overflow via Aavmker4 Device Driver
CVE-2005-1775
Terminator 3: War of the Machines 1.16 - Denial of Service via Large Nickname
CVE-2005-1462
Ethereal < 0.10.11 - Remote Code Execution via ICEP Dissector Double Free
CVE-2005-0211
Squid < 2.5.STABLE7 - Buffer Overflow via WCCP Packet
CVE-2005-0247
PostgreSQL <= 8.0.1 - Multiple Buffer Overflows in gram.y SQL Parsing
CVE-2005-0256
wu-ftpd 2.6.1-2.6.2 - Denial of Service via Glob Pattern Recursion
CVE-2005-1123
monkey-project/monkey < 0.9.0 - Denial of Service via Zero Byte File Request
CVE-2005-0351
SCO OpenServer 5.0.6-5.0.7 - Buffer Overflow via HOME Environment Variable
CVE-2005-0504
Linux Kernel < 2.6.22 - Local Buffer Overflow in Moxa Serial Driver
CVE-2005-0177
Linux Kernel < 2.6.8.1 - Denial of Service via nls_ascii.c Buffer Overflow
CVE-2004-0694
LHA < 1.14 - Buffer Overflow via Command Line Processing
CVE-2004-1114
Skype 1.0.x.94-1.0.x.98 - Buffer Overflow via Long Username in callto:// URL
CVE-2004-1211
Mercury/32 4.01a - Authenticated Buffer Overflow via IMAP Command Arguments
CVE-2004-1258
abcm2ps 3.7.20 - Buffer Overflow via Crafted ABC Files
CVE-2004-1267
CUPS - Buffer Overflow in hpgltops ParseCommand Function
CVE-2004-0638
Oracle 8i 8.1.7.4 and 9i 9.0.1.4-9.0.1.5 and 9.2.0.3-9.2.0.4 - Authenticated Buffer Overflow in KSDWRTB Function
CVE-2004-2111
Serv-U FTP Server <4.2 - Buffer Overflow
CVE-2004-2466
Easy Chat Server 1.2 and 2.2 - Denial of Service via Long Username Parameter
CVE-2004-2541
cscope 15.5 - Remote Code Execution via Long #include Line
CVE-2004-2685
YoungZSoft CCProxy < 6.2 - Remote Code Execution via Long Ping Command
CVE-2004-2709
Gyach Enhanced < 1.0.3 - Buffer Overflow in strip_html_tags Method
CVE-2004-2710
Gyach Enhanced < 1.0.2 - Buffer Overflow via Typing Status or Chat Room Status Bar
CVE-2004-2711
Gyach Enhanced < 1.0.1 - Remote Buffer Overflow via Avatar Retrieval
CVE-2004-2712
Gyach Enhanced < 1.0.0_sneakpeek_2 - Buffer Overflow via URL Data
Details
Vulnerabilities 14,031
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits