VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (14,335)

page 698 of 717
  • CVE-2008-1210Mar 8, 2008
    Programmer's Notepad
    Programmer's Notepad
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in the ctags parsing code in Programmer's Notepad before 2.0.8.718 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted .c file, when the victim selects the Jump To dialog. …

  • CVE-2008-1096Mar 5, 2008
    ImageMagick
    Imagemagick
    risk 0.00cvss —epss 0.05

    The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an…

  • CVE-2007-6252Mar 3, 2008
    Learn2
    Strunner
    risk 0.00cvss —epss 0.03

    Multiple stack-based buffer overflows in the Learn2 Corporation STRunner (aka Street Technologies) ActiveX control in iestm32.dll allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2008-0304Feb 29, 2008
    Mozilla Corporation
    Thunderbird
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

  • CVE-2007-5397Feb 28, 2008
    Activepdf
    Server
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size…

  • CVE-2008-0309Feb 28, 2008
    Symantec
    Scan Engine
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…

  • CVE-2008-1056Feb 28, 2008
    Symark
    Powerbroker
    risk 0.00cvss —epss 0.00

    Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that…

  • CVE-2008-1040Feb 27, 2008
    Fujitsu
    Interstage Application Server
    risk 0.00cvss —epss 0.05

    Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI.

  • CVE-2008-0973Feb 25, 2008
    Microfocus
    StorageWorks Storage Mirroring
    risk 0.00cvss —epss 0.02

    Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field.

  • CVE-2008-0638Feb 21, 2008
    Symantec
    Storage Foundation
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for…

  • CVE-2008-0882Feb 21, 2008
    Openprinting
    Cups
    risk 0.00cvss —epss 0.06

    Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation…

  • CVE-2007-6426Feb 21, 2008
    EMC Corporation
    Replistor
    risk 0.00cvss —epss 0.03

    Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data.

  • CVE-2008-0674Feb 18, 2008
    Pcre
    Pcre
    risk 0.00cvss —epss 0.06

    Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.

  • CVE-2008-0528Feb 15, 2008
    Cisco Systems, Inc.
    Skinny Client Control Protocol \(sccp\) Firmware
    risk 0.00cvss —epss 0.05

    Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.

  • CVE-2008-0529Feb 15, 2008
    Cisco Systems, Inc.
    Unified IP Phone 7906g
    risk 0.00cvss —epss 0.05

    Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.

  • CVE-2008-0530Feb 15, 2008
    Cisco Systems, Inc.
    Skinny Client Control Protocol \(sccp\) Firmware
    risk 0.00cvss —epss 0.05

    Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response.

  • CVE-2008-0531Feb 15, 2008
    Cisco Systems, Inc.
    Skinny Client Control Protocol \(sccp\) Firmware
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.

  • CVE-2008-0768Feb 13, 2008
    IBM
    Informix Dynamic Server
    risk 0.00cvss —epss 0.04

    Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.

  • CVE-2008-0766Feb 13, 2008
    Brooks
    Remote Print Manager
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are…

  • CVE-2008-0725Feb 12, 2008
    Titan
    FTP Server
    risk 0.00cvss —epss 0.03

    Multiple heap-based buffer overflows in the (1) FTP service and (2) administration service in Titan FTP Server 6.0.5.549 allow remote attackers to cause a denial of service (daemon hang) and possibly execute arbitrary code via a long command. NOTE: the USER and PASS commands…