VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (10,979)

page 511 of 549
  • CVE-2010-0919Mar 3, 2010
    IBM
    Domino Web Access
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to…

  • CVE-2010-0417Feb 18, 2010
    Helix
    Helix Player
    risk 0.00cvss —epss 0.04

    Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap…

  • CVE-2009-4643Feb 15, 2010
    Juniper Networks
    Odyssey Access Client
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICE_CMD_UNINSTALL…

  • CVE-2009-4274Feb 12, 2010
    Netpbm
    Netpbm
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a…

  • CVE-2010-0297Feb 12, 2010
    QEMU
    Qemu
    risk 0.00cvss —epss 0.01

    Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted…

  • CVE-2010-0564Feb 10, 2010
    Trend Micro
    Officescan
    risk 0.00cvss —epss 0.02

    Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service (crash or OfficeScan hang) via unspecified vectors. NOTE: it is likely that this…

  • CVE-2010-0562Feb 8, 2010
    Fetchmail
    Fetchmail
    risk 0.00cvss —epss 0.03

    The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate…

  • CVE-2010-0409Feb 8, 2010
    GMime
    GMime
    risk 0.00cvss —epss 0.03

    Buffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via input data for a uuencode operation.

  • CVE-2003-1576Jan 28, 2010
    Sun Corporation
    Change Manager
    risk 0.00cvss —epss 0.05

    Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2010-0392Jan 26, 2010
    Thegreenbow
    Ipsec VPN Client
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy (.tgb) file, related to "phase 2."

  • CVE-2010-0391Jan 26, 2010
    Embarcadero
    Interbase Smp 2009
    risk 0.00cvss —epss 0.03

    Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely…

  • CVE-2009-4243Jan 25, 2010
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.03

    RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted…

  • CVE-2010-0358Jan 20, 2010
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.02

    Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than…

  • CVE-2009-4486Jan 8, 2010
    Novell
    Imanager
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.

  • CVE-2010-0272Jan 8, 2010
    Sun Corporation
    Java System Web Server
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no…

  • CVE-2009-4500Dec 31, 2009
    Zabbix
    Zabbix
    risk 0.00cvss —epss 0.02

    The process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service (crash) via a crafted request with data that lacks an expected : (colon) separator, which triggers a NULL pointer dereference.

  • CVE-2008-7249Dec 30, 2009
    Squid Analysis Report Generator
    Sarg
    risk 0.00cvss —epss 0.04

    Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.

  • CVE-2009-4482Dec 30, 2009
    Tversity
    Tversity
    risk 0.00cvss —epss 0.05

    Buffer overflow in MediaServer.exe in TVersity 1.6 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by the vd_tversity module in VulnDisco Pack Professional 8.11. NOTE: as of 20091229, this disclosure has no actionable information.…

  • CVE-2009-4480Dec 30, 2009
    Azeotech
    Daqfactory
    risk 0.00cvss —epss 0.03

    Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.16 through 8.11. NOTE: as of 20091229, this disclosure has no…

  • CVE-2009-4476Dec 30, 2009
    Hauri
    Virobot
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.15 through 8.11. NOTE: some of these details are…