CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 52)
Page 52 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000210 | Critical | 9.8 | 2017-11-17 | picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack |
CVE-2017-1000187 | High | 7.8 | 2017-11-17 | In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF() |
CVE-2017-1000186 | Medium | 5.5 | 2017-11-17 | In SWFTools, a stack overflow was found in pdf2swf. |
CVE-2017-1000185 | Medium | 5.5 | 2017-11-17 | In SWFTools, a memcpy buffer overflow was found in gif2swf. |
CVE-2017-1000176 | Medium | 5.5 | 2017-11-17 | In SWFTools, a memcpy buffer overflow was found in swfc. |
CVE-2017-1000174 | Medium | 5.5 | 2017-11-17 | In SWFTools, an address access exception was found in swfdump swf_GetBits(). |
CVE-2017-1000218 | Critical | 9.8 | 2017-11-17 | LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution. |
CVE-2017-0842 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-375025… |
CVE-2017-9721 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur… |
CVE-2017-9719 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the kernel driver MDSS, a buffer overflow ca… |
CVE-2017-9696 | High | 7.5 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible in camera driver f… |
CVE-2017-11085 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an integer overflow leading to a buffer overflo… |
CVE-2017-11029 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers "user-memory-access… |
CVE-2017-11018 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, array access out of bounds may occur in the cam… |
CVE-2017-11017 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a specially crafted UBI image, i… |
CVE-2017-0866 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a po… |
CVE-2017-16844 | Critical | 9.8 | 2017-11-16 | Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application c… |
CVE-2017-8807 | Critical | 9.1 | 2017-11-16 | vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive inf… |
CVE-2017-16827 | High | 7.8 | 2017-11-15 | The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remot… |
CVE-2017-16826 | High | 7.8 | 2017-11-15 | The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote… |
CVE-2017-11884 | High | 7.8 | 2017-11-15 | Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in me… |
CVE-2017-11882 | High | 7.8 | 2017-11-15 | Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker t… |
CVE-2017-11878 | High | 7.8 | 2017-11-15 | Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsof… |
CVE-2017-11873 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same us… |
CVE-2017-11871 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d… |
CVE-2017-11870 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d… |
CVE-2017-11869 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511… |
CVE-2017-11866 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
CVE-2017-11862 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to h… |
CVE-2017-11861 | High | 7.5 | 2017-11-15 | Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curr… |
CVE-2017-11858 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi… |
CVE-2017-11856 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511… |
CVE-2017-11855 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… |
CVE-2017-11854 | High | 8.8 | 2017-11-15 | Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service P… |
CVE-2017-11846 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi… |
CVE-2017-11845 | High | 7.5 | 2017-11-15 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles… |
CVE-2017-11843 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Micros… |
CVE-2017-11841 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
CVE-2017-11840 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
CVE-2017-11839 | High | 7.5 | 2017-11-15 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affect… |
CVE-2017-11838 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft… |
CVE-2017-11837 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft… |
CVE-2017-11836 | High | 7.5 | 2017-11-15 | ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to… |
CVE-2017-11827 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and In… |
CVE-2017-3893 | Low | 1.9 | 2017-11-14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers fro… |
CVE-2017-6274 | Critical | 9.8 | 2017-11-14 | An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds w… |
CVE-2017-14024 | Critical | 9.8 | 2017-11-13 | A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v… |
CVE-2017-16803 | High | 7.5 | 2017-11-13 | In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows… |
CVE-2017-10875 | High | 7.5 | 2017-11-13 | I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors. |
CVE-2017-10871 | Critical | 9.8 | 2017-11-13 | Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary cod… |
CVE-2017-13843 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute… |
CVE-2017-13838 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" component. It allows attackers to execute… |
CVE-2017-13834 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows remote attackers to c… |
CVE-2017-13833 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execu… |
CVE-2017-13830 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HFS" component. It allows attackers to execute arb… |
CVE-2017-13829 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execu… |
CVE-2017-13824 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scripting Architecture" component. It allows… |
CVE-2017-13820 | High | 7.1 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obta… |
CVE-2017-13816 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers… |
CVE-2017-13814 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to… |
CVE-2017-13813 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers… |
CVE-2017-13812 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers… |
CVE-2017-13811 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "fsck_msdos" component. It allows attackers to exec… |
CVE-2017-13808 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Remote Management" component. It allows attackers… |
CVE-2017-13803 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13802 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13800 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" component. It allows attackers to execute ar… |
CVE-2017-13799 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before… |
CVE-2017-13798 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13797 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13796 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13795 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13794 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13793 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13792 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13791 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13788 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13785 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13784 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13783 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-16796 | High | 7.8 | 2017-11-12 | In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of ser… |
CVE-2017-16793 | High | 7.8 | 2017-11-12 | The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service (i… |
CVE-2017-12969 | High | 8.8 | 2017-11-10 | Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of se… |
CVE-2017-11309 | Critical | 9.6 | 2017-11-10 | Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response. |
CVE-2017-16671 | High | 8.8 | 2017-11-09 | A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13… |
CVE-2017-16669 | High | 8.8 | 2017-11-09 | coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have… |
CVE-2017-12824 | High | 7.8 | 2017-11-08 | Special crafted InPage document leads to arbitrary code execution in InPage reader. |
CVE-2017-14016 | Medium | 6.3 | 2017-11-06 | A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the lengt… |
CVE-2017-16546 | High | 8.8 | 2017-11-05 | The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers… |
CVE-2017-16534 | Medium | 6.8 | 2017-11-04 | The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bound… |
CVE-2017-16531 | Medium | 6.6 | 2017-11-04 | drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly h… |
CVE-2017-16526 | High | 7.8 | 2017-11-04 | drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protection fault and system crash) or possibly ha… |
CVE-2017-16513 | High | 7.8 | 2017-11-03 | Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729. |
CVE-2017-11767 | Critical | 9.8 | 2017-11-02 | ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory… |
CVE-2017-12283 | Medium | 6.1 | 2017-11-02 | A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacen… |
CVE-2017-12282 | Medium | 6.1 | 2017-11-02 | A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthentic… |
CVE-2017-12280 | High | 7.5 | 2017-11-02 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers co… |
CVE-2017-12278 | Medium | 6.3 | 2017-11-02 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to c… |
CVE-2017-10870 | High | 7.8 | 2017-11-02 | Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (… |
CVE-2017-16357 | High | 7.8 | 2017-11-01 | In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, a… |