CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 59)
Page 59 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8635 | High | 7.5 | 2017-08-08 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
CVE-2017-8634 | High | 7.5 | 2017-08-08 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft brows… |
CVE-2017-8627 | Medium | 4.7 | 2017-08-08 | Windows Subsystem for Linux in Windows 10 1703, allows a denial of service vulnerability due to the way it handles objects in memory, aka "Windows Subsystem fo… |
CVE-2017-8620 | High | 8.1 | 2017-08-08 | Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607… |
CVE-2017-0293 | High | 7.5 | 2017-08-08 | Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, a… |
CVE-2017-0250 | High | 7.8 | 2017-08-08 | Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Go… |
CVE-2014-1235 | High | 7.8 | 2017-08-07 | Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (applic… |
CVE-2017-9647 | Medium | 6.6 | 2017-08-07 | A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010… |
CVE-2017-9633 | High | 8.8 | 2017-08-07 | An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on B… |
CVE-2017-7936 | Medium | 6.3 | 2017-08-07 | A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX… |
CVE-2017-6745 | High | 7.5 | 2017-08-07 | A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker t… |
CVE-2017-6419 | High | 7.8 | 2017-08-07 | mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application… |
CVE-2006-3635 | Medium | 5.5 | 2017-08-07 | The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted applica… |
CVE-2017-12562 | Critical | 9.8 | 2017-08-05 | Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (… |
CVE-2017-12482 | High | 7.8 | 2017-08-04 | The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and… |
CVE-2017-12481 | High | 7.8 | 2017-08-04 | The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash)… |
CVE-2017-12424 | Critical | 9.8 | 2017-08-04 | In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to cra… |
CVE-2017-11721 | Critical | 9.8 | 2017-08-03 | Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impac… |
CVE-2017-1495 | Medium | 4.9 | 2017-08-02 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information incl… |
CVE-2017-2282 | Medium | 6.8 | 2017-08-02 | Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. |
CVE-2017-12141 | Medium | 5.5 | 2017-08-02 | In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of servi… |
CVE-2017-8663 | High | 7.8 | 2017-08-01 | Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code exec… |
CVE-2017-11552 | Medium | 6.5 | 2017-08-01 | mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corr… |
CVE-2017-11551 | Medium | 5.5 | 2017-07-31 | The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. |
CVE-2017-11548 | Medium | 5.5 | 2017-07-31 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3… |
CVE-2017-11331 | Medium | 5.5 | 2017-07-31 | The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a cra… |
CVE-2017-11115 | Medium | 5.5 | 2017-07-31 | The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer o… |
CVE-2017-11732 | Medium | 5.5 | 2017-07-29 | A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0.4.8, which allows a… |
CVE-2017-6260 | Medium | 6.5 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length may lead to… |
CVE-2017-8870 | High | 7.8 | 2017-07-27 | Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file. |
CVE-2016-10402 | High | 7.8 | 2017-07-27 | Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual add… |
CVE-2017-8869 | High | 7.8 | 2017-07-27 | Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file. |
CVE-2017-9614 | High | 8.8 | 2017-07-27 | The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory access and application… |
CVE-2017-9412 | Medium | 5.5 | 2017-07-27 | The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and applicati… |
CVE-2017-11674 | Medium | 5.5 | 2017-07-27 | Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a "Read Access Violati… |
CVE-2017-9619 | High | 7.8 | 2017-07-26 | The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (Segmentati… |
CVE-2017-9618 | High | 7.8 | 2017-07-26 | The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer overflow and… |
CVE-2017-11643 | Critical | 9.8 | 2017-07-26 | GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths. |
CVE-2017-11640 | Medium | 6.5 | 2017-07-26 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c. |
CVE-2017-11636 | Critical | 9.8 | 2017-07-26 | GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical widths. |
CVE-2017-11628 | High | 7.8 | 2017-07-25 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could… |
CVE-2017-6753 | High | 8.8 | 2017-07-25 | A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary co… |
CVE-2017-6612 | High | 8.6 | 2017-07-25 | A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauth… |
CVE-2015-6585 | High | 7.8 | 2017-07-25 | hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWP… |
CVE-2015-1438 | High | 7.8 | 2017-07-25 | Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a craft… |
CVE-2015-1332 | High | 8.8 | 2017-07-25 | The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of… |
CVE-2017-7980 | High | 7.8 | 2017-07-25 | Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or c… |
CVE-2017-7541 | High | 7.8 | 2017-07-25 | The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to caus… |
CVE-2017-11592 | High | 7.5 | 2017-07-24 | There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service a… |
CVE-2017-11576 | Medium | 5.5 | 2017-07-23 | FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file. |
CVE-2017-11574 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file. |
CVE-2017-11571 | High | 7.8 | 2017-07-23 | FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file. |
CVE-2017-11543 | Critical | 9.8 | 2017-07-23 | tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c. |
CVE-2017-2276 | High | 7.2 | 2017-07-22 | Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. |
CVE-2017-7523 | High | 7.5 | 2017-07-21 | Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service… |
CVE-2017-11517 | Critical | 9.8 | 2017-07-21 | Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a… |
CVE-2017-7069 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7068 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7062 | Critical | 9.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7061 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7056 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7055 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7054 | High | 8.0 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execu… |
CVE-2017-7052 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7051 | High | 8.0 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execu… |
CVE-2017-7050 | High | 8.0 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execu… |
CVE-2017-7049 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7048 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7047 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7046 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7044 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7043 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7042 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7041 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7040 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7039 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7037 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7035 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7034 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7033 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to e… |
CVE-2017-7032 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "kext tools" component. It allows attackers to exec… |
CVE-2017-7031 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Foundation" component. It allows remote attackers… |
CVE-2017-7030 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7027 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7026 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7025 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7024 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7023 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7022 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7021 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "AppleGraphicsPowerManagement" component. It allows… |
CVE-2017-7020 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7019 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7018 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7017 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7016 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to e… |
CVE-2017-7015 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to ob… |
CVE-2017-7014 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7012 | High | 8.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected… |
CVE-2017-7009 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS bef… |
CVE-2017-7008 | High | 7.8 | 2017-07-20 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue i… |