VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (14,447)

page 445 of 723
  • CVE-2007-6401Dec 17, 2007
    Microsoft
    Windows Media Player
    risk 0.05cvss —epss 0.30

    Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402.

  • CVE-2007-6015Dec 13, 2007
    Samba (software)
    Samba
    risk 0.05cvss —epss 0.27

    Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset…

  • CVE-2007-6026Nov 20, 2007
    Microsoft
    Office
    risk 0.05cvss —epss 0.28

    Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a…

  • CVE-2007-5466Oct 15, 2007
    Extremail
    Extremail
    risk 0.05cvss —epss 0.20

    Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the…

  • CVE-2007-4466Oct 9, 2007
    Electronic Arts
    Snoopyctrl
    risk 0.05cvss —epss 0.31

    Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.

  • CVE-2007-5217Oct 5, 2007
    Grokster
    Grokster
    risk 0.05cvss —epss 0.30

    Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this…

  • CVE-2007-4916Sep 17, 2007
    Hewlett-Packard
    All-in-One
    risk 0.05cvss —epss 0.20

    Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo…

  • CVE-2007-4286Aug 9, 2007
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.05cvss —epss 0.19

    Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.

  • CVE-2007-1347Mar 8, 2007
    Microsoft
    Windows Explorer
    risk 0.05cvss —epss 0.31

    Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in…

  • CVE-2007-0236Jan 16, 2007
    Apple Inc.
    Mac OS X
    risk 0.05cvss —epss 0.22

    Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer…

  • CVE-2006-6652Dec 20, 2006
    Apple Inc.
    Mac OS X
    risk 0.05cvss —epss 0.20

    Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long…

  • CVE-2006-5710Nov 4, 2006
    Apple Inc.
    Mac OS X
    risk 0.05cvss —epss 0.20

    The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after…

  • CVE-2006-5647Nov 1, 2006
    Sophos
    Endpoint Security
    risk 0.05cvss —epss 0.21

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name…

  • CVE-2006-4018Aug 8, 2006
    ClamAV
    Clamav
    risk 0.05cvss —epss 0.19

    Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

  • CVE-2006-2297May 10, 2006
    Microsoft
    Infotech Storage System Library
    risk 0.05cvss —epss 0.19

    Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling.

  • CVE-2006-1982Apr 21, 2006
    Apple Inc.
    Mac OS X
    risk 0.05cvss —epss 0.20

    Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images.

  • CVE-2006-1043Mar 7, 2006
    Microsoft
    Visual Interdev
    risk 0.05cvss —epss 0.23

    Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln).

  • CVE-2005-2340Dec 31, 2005
    Apple Inc.
    Quicktime
    risk 0.05cvss —epss 0.26

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.

  • CVE-1999-0002Oct 12, 1998
    Bsdi
    BSD OS
    risk 0.05cvss —epss 0.27

    Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.

  • CVE-2015-7112Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.04cvss —epss 0.09

    The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…