VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (10,979)

page 497 of 549
  • CVE-2011-0731Feb 1, 2011
    IBM
    Db2
    risk 0.00cvss —epss 0.04

    Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2011-0682Jan 31, 2011
    Opera
    Opera
    risk 0.00cvss —epss 0.06

    Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML form with a select element that contains a large number of children.

  • CVE-2010-0110Jan 31, 2011
    Symantec
    System Center
    risk 0.00cvss —epss 0.05

    Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to…

  • CVE-2010-4714Jan 31, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.06

    Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post Office Agent, (2) gwmta.exe in the Message Transfer Agent, (3) gwia.exe in the Internet Agent, (4)…

  • CVE-2011-0651Jan 28, 2011
    Icon Labs
    Iconfidant SSL Server
    risk 0.00cvss —epss 0.05

    Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value.

  • CVE-2011-0520Jan 28, 2011
    Maradns
    Maradns
    risk 0.00cvss —epss 0.05

    The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long DNS hostname with a large number of labels,…

  • CVE-2011-0021Jan 25, 2011
    VideoLAN
    VLC media player
    risk 0.00cvss —epss 0.06

    Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video.

  • CVE-2011-0352Jan 24, 2011
    Cisco Systems, Inc.
    Linksys WRT54GC
    risk 0.00cvss —epss 0.02

    Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attackers to cause a denial of service (device crash) via a long string in a POST request.

  • CVE-2011-0427Jan 19, 2011
    Tor
    Tor
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

  • CVE-2010-4698Jan 18, 2011
    PHP
    PHP
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.

  • CVE-2011-0408Jan 18, 2011
    Libpng
    Libpng
    risk 0.00cvss —epss 0.06

    pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the png_do_expand_palette function, the…

  • CVE-2010-4531Jan 18, 2011
    PCSC-Lite
    PCSC-Lite
    risk 0.00cvss —epss 0.01

    Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute…

  • CVE-2010-4695Jan 14, 2011
    Catb
    Gif2png
    risk 0.00cvss —epss 0.02

    A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in…

  • CVE-2010-4694Jan 14, 2011
    Catb
    Gif2png
    risk 0.00cvss —epss 0.02

    Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output…

  • CVE-2011-0477Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.

  • CVE-2011-0476Jan 14, 2011
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.

  • CVE-2011-0310Jan 13, 2011
    IBM
    Websphere Mq
    risk 0.00cvss —epss 0.03

    Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted header field in a message.

  • CVE-2010-2604Jan 13, 2011
    Rim
    Blackberry Enterprise Server
    risk 0.00cvss —epss 0.06

    Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a…

  • CVE-2011-0314Jan 12, 2011
    IBM
    Websphere Mq
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash) by inserting an invalid message into the queue.

  • CVE-2010-3444Jan 11, 2011
    Fribidi
    Gnu Fribidi
    risk 0.00cvss —epss 0.04

    Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Arabic UTF-8 string…