CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,106 vulnerabilities with CWE-120
CVE-2010-2434
Ponsoftware Explzh < 5.62 - Buffer Overflow
CVE-2010-1450
Python 2.5 - Buffer Overflow
CVE-2009-0948 CRITICAL
Apple Files < 5.02 - Buffer Overflow
CVSS 9.8
CVE-2009-4067 MEDIUM
Auerswald Linux USB <2.6.27 - Buffer Overflow
CVSS 6.8
CVE-2009-5041 CRITICAL
Debian Overkill < 0.16-14.1 - Buffer Overflow
CVSS 9.8
CVE-2009-2502 HIGH
Microsoft GDI+ - Buffer Overflow
CVSS 8.1
CVE-2009-3023
Microsoft Internet Information Server < 6.0 - Buffer Overflow
CVE-2009-1186
Udev < 141 - Buffer Overflow
CVE-2009-0884
Filezilla-project Filezilla Server < 0.9.31 - Buffer Overflow
CVE-2009-0182 HIGH
VUPlayer <2.49 - RCE
CVSS 8.8
CVE-2008-3275 MEDIUM
Linux kernel <2.6.25.15 - DoS
CVSS 5.5
CVE-2008-3496
Linux Kernel <2.6.26.1 - Buffer Overflow
CVE-2008-3142
Python <2.5.2 - Buffer Overflow
CVE-2008-1677
Red Hat Directory Server <7.1 SP6 - Buffer Overflow
CVE-2008-1887
Python <2.5.2 - Buffer Overflow
CVE-2008-0379
Businessobjects Crystal Reports XI - Race Condition
CVE-2007-5659 HIGH KEV
Adobe Acrobat < 8.1.2 - Buffer Overflow
CVSS 7.8
CVE-2007-2809
Opera <9.21 - Buffer Overflow
CVE-2007-1887
Php < 4.4.5 - Buffer Overflow
CVE-2007-1770
Esri Arcsde - Buffer Overflow
CVE-2007-0803
STLport <5.0.3 - Buffer Overflow
CVE-2007-0455
GD Graphics Library < 2.0.33 - Buffer Overflow
CVE-2006-3100 CRITICAL
termpkg <3.3 - Buffer Overflow
CVSS 9.8
CVE-2006-6024 CRITICAL
Qualcomm Eudora Worldmail - Buffer Overflow
CVSS 9.8
CVE-2006-3404
GIMP <2.2.12 - Buffer Overflow
Details
Vulnerabilities 4,106
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits