CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 62)
Page 62 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-10706 | Medium | 6.2 | 2017-07-02 | When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed path length is use… |
CVE-2017-10684 | Critical | 9.8 | 2017-06-29 | In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack. |
CVE-2017-8558 | High | 7.8 | 2017-06-29 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP… |
CVE-2017-1310 | Medium | 6.5 | 2017-06-29 | IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done e… |
CVE-2017-9998 | Medium | 6.5 | 2017-06-28 | The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault)… |
CVE-2017-9996 | High | 7.8 | 2017-06-28 | The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before… |
CVE-2017-9995 | High | 7.8 | 2017-06-28 | libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap… |
CVE-2017-9994 | High | 7.8 | 2017-06-28 | libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is s… |
CVE-2017-9992 | High | 8.8 | 2017-06-28 | Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5… |
CVE-2017-9991 | High | 7.8 | 2017-06-28 | Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x befor… |
CVE-2017-9990 | High | 8.8 | 2017-06-28 | Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of… |
CVE-2017-9987 | High | 7.5 | 2017-06-28 | There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service a… |
CVE-2014-6354 | High | 7.5 | 2017-06-27 | Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows remote attackers to e… |
CVE-2017-1297 | High | 7.3 | 2017-06-27 | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper… |
CVE-2017-1105 | High | 7.1 | 2017-06-27 | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to… |
CVE-2017-9220 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (m… |
CVE-2017-9219 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (m… |
CVE-2017-9948 | High | 8.8 | 2017-06-26 | A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP… |
CVE-2017-9937 | Medium | 6.5 | 2017-06-26 | In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack. |
CVE-2017-9929 | Medium | 5.5 | 2017-06-26 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a craft… |
CVE-2017-9928 | Medium | 5.5 | 2017-06-26 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafte… |
CVE-2017-6669 | High | 7.8 | 2017-06-26 | Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit… |
CVE-2017-9872 | High | 7.8 | 2017-06-25 | The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a deni… |
CVE-2017-9871 | High | 7.8 | 2017-06-25 | The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of ser… |
CVE-2015-9101 | Medium | 5.5 | 2017-06-25 | The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attacke… |
CVE-2017-9775 | Medium | 6.5 | 2017-06-22 | Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafte… |
CVE-2017-3631 | Medium | 5.3 | 2017-06-22 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploi… |
CVE-2017-3629 | High | 7.8 | 2017-06-22 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily… |
CVE-2017-1304 | Medium | 6.2 | 2017-06-21 | IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an uns… |
CVE-2017-3096 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploita… |
CVE-2017-3095 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. Successful exploitation could… |
CVE-2017-3094 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine. Successful exploitation cou… |
CVE-2017-3093 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module. Successful exploitat… |
CVE-2017-3089 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. Successful exploitation could l… |
CVE-2017-3088 | Critical | 10.0 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could… |
CVE-2017-3086 | Critical | 9.8 | 2017-06-20 | Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execu… |
CVE-2017-3082 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lea… |
CVE-2017-3079 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successfu… |
CVE-2017-3078 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exp… |
CVE-2017-3077 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could l… |
CVE-2017-3076 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could… |
CVE-2017-7679 | Critical | 9.8 | 2017-06-20 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response… |
CVE-2017-9763 | High | 7.5 | 2017-06-19 | The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause… |
CVE-2017-9761 | Medium | 5.5 | 2017-06-19 | The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application c… |
CVE-2017-1000377 | Medium | 5.9 | 2017-06-19 | An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped by other Linux vendors), specifically… |
CVE-2017-1000376 | High | 7.0 | 2017-06-19 | libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is use… |
CVE-2017-1000375 | Critical | 9.8 | 2017-06-19 | NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory lea… |
CVE-2017-1000366 | High | 7.8 | 2017-06-19 | glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting… |
CVE-2017-1000364 | High | 7.4 | 2017-06-19 | An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (th… |
CVE-2017-9756 | High | 7.8 | 2017-06-19 | The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and a… |
CVE-2017-9755 | High | 7.8 | 2017-06-19 | opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buf… |
CVE-2017-9754 | High | 7.8 | 2017-06-19 | The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a c… |
CVE-2017-9753 | High | 7.8 | 2017-06-19 | The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initia… |
CVE-2017-9752 | High | 7.8 | 2017-06-19 | bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of ser… |
CVE-2017-9751 | High | 7.8 | 2017-06-19 | opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and ap… |
CVE-2017-9750 | High | 7.8 | 2017-06-19 | opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer ove… |
CVE-2017-9749 | High | 7.8 | 2017-06-19 | The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or pos… |
CVE-2017-9748 | High | 7.8 | 2017-06-19 | The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote atta… |
CVE-2017-9747 | High | 7.8 | 2017-06-19 | The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote att… |
CVE-2017-9746 | High | 7.8 | 2017-06-19 | The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) o… |
CVE-2017-9745 | High | 7.8 | 2017-06-19 | The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remot… |
CVE-2017-9744 | High | 7.8 | 2017-06-19 | The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows… |
CVE-2017-9743 | High | 7.8 | 2017-06-19 | The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and appl… |
CVE-2017-9742 | High | 7.8 | 2017-06-19 | The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application c… |
CVE-2016-10395 | High | 7.8 | 2017-06-15 | In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named… |
CVE-2017-8549 | High | 7.5 | 2017-06-15 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the u… |
CVE-2017-8548 | High | 7.5 | 2017-06-15 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the u… |
CVE-2017-8547 | High | 7.5 | 2017-06-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to e… |
CVE-2017-8529 | Medium | 6.5 | 2017-06-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to d… |
CVE-2017-8528 | High | 8.8 | 2017-06-15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Wind… |
CVE-2017-8527 | High | 8.8 | 2017-06-15 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703… |
CVE-2017-8524 | High | 7.5 | 2017-06-15 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
CVE-2017-8522 | High | 7.5 | 2017-06-15 | Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allo… |
CVE-2017-8521 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
CVE-2017-8520 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
CVE-2017-8519 | High | 7.5 | 2017-06-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker… |
CVE-2017-8517 | High | 7.5 | 2017-06-15 | Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, an… |
CVE-2017-8513 | High | 7.8 | 2017-06-15 | A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Re… |
CVE-2017-8507 | High | 7.8 | 2017-06-15 | A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory Corrupt… |
CVE-2017-8499 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
CVE-2017-8497 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
CVE-2017-8496 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
CVE-2017-7910 | High | 7.5 | 2017-06-14 | A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary c… |
CVE-2017-9502 | Medium | 5.3 | 2017-06-14 | In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which protocol libcurl shou… |
CVE-2017-0637 | High | 7.8 | 2017-06-14 | A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-8241 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length. |
CVE-2017-8238 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function. |
CVE-2017-8237 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image. |
CVE-2017-8236 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver. |
CVE-2017-7372 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary… |
CVE-2016-10342 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler. |
CVE-2016-10340 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler. |
CVE-2015-9028 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine. |
CVE-2015-9025 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application. |
CVE-2015-9023 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. |
CVE-2014-9963 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM. |
CVE-2014-9960 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. |
CVE-2015-3220 | High | 7.5 | 2017-06-13 | The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash). |
CVE-2017-6655 | Medium | 6.5 | 2017-06-13 | A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… |
CVE-2017-6892 | High | 8.8 | 2017-06-12 | In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a speci… |