VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (10,979)

page 314 of 549
  • CVE-2007-6699Feb 4, 2008
    AOL
    Ygp Piceditor Activex Control
    risk 0.03cvss —epss 0.04

    Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3)…

  • CVE-2008-0365Jan 18, 2008
    CORE FORCE
    CORE FORCE
    risk 0.03cvss —epss 0.01

    Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments to (1) IOCTL functions in the Firewall module or (2) SSDT hook handler functions…

  • CVE-2008-0337Jan 17, 2008
    Miniweb HTTP Server
    Miniweb HTTP Server
    risk 0.03cvss —epss 0.05

    Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI.

  • CVE-2007-6654Jan 4, 2008
    Macrovision
    Update Service
    risk 0.03cvss —epss 0.06

    Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to execute arbitrary code via a long string in the ProductCode argument (second argument) to the DownloadAndExecute method, a different…

  • CVE-2007-6609Dec 31, 2007
    Coolplayer
    Coolplayer
    risk 0.03cvss —epss 0.05

    Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file.

  • CVE-2007-6605Dec 31, 2007
    Skyfex
    Skyfex Client
    risk 0.03cvss —epss 0.04

    Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers to execute arbitrary code via long strings in the first four arguments to the Start method.

  • CVE-2007-6516Dec 21, 2007
    Ravware
    Flic Activex Control
    risk 0.03cvss —epss 0.04

    Buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property.

  • CVE-2007-6510Dec 21, 2007
    Prowizard
    Prowizard 4 Pc
    risk 0.03cvss —epss 0.04

    Multiple stack-based buffer overflows in ProWizard 4 PC (prowiz) 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the (1) AMOS-MusicBank, (2) FuzzacPacker, and (3) QuadraComposer rippers; and (4) have an unknown impact via a crafted file to…

  • CVE-2007-6478Dec 20, 2007
    Rosoft
    Rosoft Media Player
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a .M3U file. NOTE: some of these details are obtained from third…

  • CVE-2007-6473Dec 20, 2007
    Texas Imperial Software
    Wftpd Pro Explorer
    risk 0.03cvss —epss 0.03

    Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command.

  • CVE-2007-6457Dec 20, 2007
    SurgeMail
    SurgeMail
    risk 0.03cvss —epss 0.04

    Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service (crash) via a long Host header.

  • CVE-2007-3876Dec 19, 2007
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.02

    Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) option to mount_smbfs or (2) an unspecified manipulation of the command line to smbutil.

  • CVE-2007-5583Dec 18, 2007
    Cisco Systems, Inc.
    IP Phone
    risk 0.03cvss —epss 0.06

    Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" responses or device reboot) via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459.

  • CVE-2007-6403Dec 17, 2007
    Winamp
    Nullsoft Winamp
    risk 0.03cvss —epss 0.03

    Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via crafted unicode in a .mp4 file, with crafted tags, contained in a certain .rar archive, a related issue to CVE-2007-2498. NOTE: for exploitation, the victim…

  • CVE-2007-6402Dec 17, 2007
    Media Player Classic
    Media Player Classic
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401.

  • CVE-2007-3895Dec 12, 2007
    Microsoft
    Directx
    risk 0.03cvss —epss 0.36

    Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.

  • CVE-2007-0064Dec 12, 2007
    Microsoft
    Windows Media Services
    risk 0.03cvss —epss 0.36

    Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems…

  • CVE-2007-6227Dec 4, 2007
    QEMU
    Qemu
    risk 0.03cvss —epss 0.01

    QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_buffer) buffer, and probably have unspecified other impacts related to an "overflow," via certain Windows executable programs, as demonstrated by qemu-dos.com.

  • CVE-2007-6228Dec 4, 2007
    Yahoo
    Toolbar
    risk 0.03cvss —epss 0.02

    Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service (browser crash) via a long argument to the c method.

  • CVE-2007-6028Nov 20, 2007
    Componentone
    Flexgrid
    risk 0.03cvss —epss 0.03

    Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the (1) Text, (2) EditSelText, (3) EditText, and…