CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 64)
Page 64 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-10764 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10763 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10762 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10761 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10760 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10759 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10758 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10757 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10756 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10755 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10754 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10753 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10752 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10751 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10750 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10749 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10748 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10747 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10746 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10745 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Bu… |
CVE-2017-10744 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Acc… |
CVE-2017-10743 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Bu… |
CVE-2017-10742 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Exe… |
CVE-2017-10741 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10740 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10739 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Exe… |
CVE-2017-10738 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Exe… |
CVE-2017-10737 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10736 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10735 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10734 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10733 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10732 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10731 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write A… |
CVE-2017-10730 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write A… |
CVE-2017-10729 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write A… |
CVE-2017-10728 | High | 7.8 | 2017-07-05 | Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code (0xe0… |
CVE-2017-10727 | High | 7.8 | 2017-07-05 | Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulti… |
CVE-2017-10726 | High | 7.8 | 2017-07-05 | Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulti… |
CVE-2017-10725 | High | 7.3 | 2017-07-05 | Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Ad… |
CVE-2017-10929 | High | 7.8 | 2017-07-05 | The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and applic… |
CVE-2017-10921 | Critical | 10.0 | 2017-07-05 | The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS… |
CVE-2017-10920 | Critical | 10.0 | 2017-07-05 | The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, whi… |
CVE-2017-10794 | Medium | 5.5 | 2017-07-02 | When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, relat… |
CVE-2017-8893 | High | 7.5 | 2017-07-02 | AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buf… |
CVE-2017-10706 | Medium | 6.2 | 2017-07-02 | When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed path length is use… |
CVE-2017-10684 | Critical | 9.8 | 2017-06-29 | In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack. |
CVE-2017-8558 | High | 7.8 | 2017-06-29 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP… |
CVE-2017-1310 | Medium | 6.5 | 2017-06-29 | IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done e… |
CVE-2017-9998 | Medium | 6.5 | 2017-06-28 | The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault)… |
CVE-2017-9996 | High | 7.8 | 2017-06-28 | The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before… |
CVE-2017-9995 | High | 7.8 | 2017-06-28 | libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap… |
CVE-2017-9994 | High | 7.8 | 2017-06-28 | libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is s… |
CVE-2017-9992 | High | 8.8 | 2017-06-28 | Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5… |
CVE-2017-9991 | High | 7.8 | 2017-06-28 | Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x befor… |
CVE-2017-9990 | High | 8.8 | 2017-06-28 | Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of… |
CVE-2017-9987 | High | 7.5 | 2017-06-28 | There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service a… |
CVE-2014-6354 | High | 7.5 | 2017-06-27 | Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows remote attackers to e… |
CVE-2017-1297 | High | 7.3 | 2017-06-27 | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper… |
CVE-2017-1105 | High | 7.1 | 2017-06-27 | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to… |
CVE-2017-9220 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (m… |
CVE-2017-9219 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (m… |
CVE-2017-9948 | High | 8.8 | 2017-06-26 | A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP… |
CVE-2017-9937 | Medium | 6.5 | 2017-06-26 | In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack. |
CVE-2017-9929 | Medium | 5.5 | 2017-06-26 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a craft… |
CVE-2017-9928 | Medium | 5.5 | 2017-06-26 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafte… |
CVE-2017-6669 | High | 7.8 | 2017-06-26 | Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit… |
CVE-2017-9872 | High | 7.8 | 2017-06-25 | The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a deni… |
CVE-2017-9871 | High | 7.8 | 2017-06-25 | The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of ser… |
CVE-2015-9101 | Medium | 5.5 | 2017-06-25 | The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attacke… |
CVE-2017-9775 | Medium | 6.5 | 2017-06-22 | Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafte… |
CVE-2017-3631 | Medium | 5.3 | 2017-06-22 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploi… |
CVE-2017-3629 | High | 7.8 | 2017-06-22 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily… |
CVE-2017-1304 | Medium | 6.2 | 2017-06-21 | IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an uns… |
CVE-2017-3096 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploita… |
CVE-2017-3095 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. Successful exploitation could… |
CVE-2017-3094 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine. Successful exploitation cou… |
CVE-2017-3093 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module. Successful exploitat… |
CVE-2017-3089 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. Successful exploitation could l… |
CVE-2017-3088 | Critical | 10.0 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could… |
CVE-2017-3086 | Critical | 9.8 | 2017-06-20 | Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execu… |
CVE-2017-3082 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lea… |
CVE-2017-3079 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successfu… |
CVE-2017-3078 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exp… |
CVE-2017-3077 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could l… |
CVE-2017-3076 | Critical | 9.8 | 2017-06-20 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could… |
CVE-2017-7679 | Critical | 9.8 | 2017-06-20 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response… |
CVE-2017-9763 | High | 7.5 | 2017-06-19 | The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause… |
CVE-2017-9761 | Medium | 5.5 | 2017-06-19 | The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application c… |
CVE-2017-1000377 | Medium | 5.9 | 2017-06-19 | An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped by other Linux vendors), specifically… |
CVE-2017-1000376 | High | 7.0 | 2017-06-19 | libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is use… |
CVE-2017-1000375 | Critical | 9.8 | 2017-06-19 | NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory lea… |
CVE-2017-1000366 | High | 7.8 | 2017-06-19 | glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting… |
CVE-2017-1000364 | High | 7.4 | 2017-06-19 | An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (th… |
CVE-2017-9756 | High | 7.8 | 2017-06-19 | The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and a… |
CVE-2017-9755 | High | 7.8 | 2017-06-19 | opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buf… |
CVE-2017-9754 | High | 7.8 | 2017-06-19 | The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a c… |
CVE-2017-9753 | High | 7.8 | 2017-06-19 | The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initia… |
CVE-2017-9752 | High | 7.8 | 2017-06-19 | bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of ser… |
CVE-2017-9751 | High | 7.8 | 2017-06-19 | opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and ap… |