CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,335 vulnerabilities with CWE-787
CVE-2014-1514 CRITICAL
Firefox < 28.0 - Out-of-bounds Write in TypedArrayObject
CVSS 9.8
CVE-2014-1513 HIGH
Firefox < 28.0 - Out-of-bounds Write via ArrayBuffer Transition
CVSS 8.8
CVE-2014-1705
Google V8 <33.0.1750.152-33.0.1750.154 - Memory Corruption
CVE-2014-1482 HIGH
Firefox < 27.0 - Out-of-bounds Write via Crafted Image Data
CVSS 8.8
CVE-2014-1478
Firefox < 27.0 and SeaMonkey < 2.24 - Out-of-bounds Write in Browser Engine
CVE-2013-7491 MEDIUM
DBI < 1.628 - Out-of-bounds Write via User-Defined Function Memory Allocation
CVSS 5.3
CVE-2013-7098 CRITICAL
OpenConnect VPN client <5.02 - Buffer Overflow
CVSS 9.8
CVE-2013-5659 HIGH
Wiz 5.0.3 - Out-of-bounds Write
CVSS 7.5
CVE-2013-3492 CRITICAL
XnView 2.03 - Stack-based Buffer Overflow
CVSS 9.8
CVE-2013-5656 HIGH
FuzeZip 1.0.0.131625 - Local Buffer Overflow
CVSS 7.8
CVE-2013-3941 CRITICAL
XnView < 2.13 - Remote Code Execution via JPEG2000 SIZ or QCD Marker Parsing
CVSS 9.8
CVE-2013-3939 HIGH
XnView < 2.13 - Remote Code Execution via RGB RLE Strip Length Handling
CVSS 7.8
CVE-2013-3937 HIGH
XnView < 2.13 - Remote Code Execution via BMP biBitCount Field
CVSS 7.8
CVE-2013-3247 HIGH
XnView < 2.03 - Remote Code Execution via Crafted RLE Compressed Layer in XCF File
CVSS 7.8
CVE-2013-3246 HIGH
XnView < 2.03 - Remote Code Execution via Crafted XCF Image Layer
CVSS 7.8
CVE-2013-3946 HIGH
MrSID < 4.37 - Remote Code Execution via Levels Header
CVSS 7.8
CVE-2013-3944 HIGH
MrSID < 4.37 - Stack-based Buffer Overflow via IMAGE Tag
CVSS 7.8
CVE-2013-2739 CRITICAL
readymedia < 1.1.0 - Heap-Based Buffer Overflow
CVSS 9.8
CVE-2013-0662
Schneider Electric Modbus Serial Driver <3.2 - RCE
CVE-2013-3249
DameWare Remote Support <10.0.0.372-9.0.1.247 - Buffer Overflow
CVE-2013-1978
GIMP < 2.6.9 - Heap-Based Buffer Overflow in XWD Plug-in Color Map Handling
CVE-2013-5610
Mozilla Firefox <26.0 & SeaMonkey <2.23 - Memory Corruption
CVE-2013-3918 HIGH KEV
Microsoft Windows - Remote Code Execution via InformationCardSigninHelper ActiveX Control
CVSS 8.8
CVE-2013-4365
mod_fcgid < 2.3.9 - Heap-based Buffer Overflow in fcgid_header_bucket_read
CVE-2013-1032
QuickTime - Remote Code Execution via Crafted idsc Atom in Movie File
Details
Vulnerabilities 14,335
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits