CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 67)
Page 67 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10254 | Medium | 5.5 | 2017-03-23 | The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which trigg… |
CVE-2017-3853 | Critical | 9.8 | 2017-03-22 | A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cau… |
CVE-2017-7231 | High | 7.8 | 2017-03-22 | pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issu… |
CVE-2017-7230 | Critical | 9.8 | 2017-03-22 | A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request. |
CVE-2017-7227 | High | 7.5 | 2017-03-22 | GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This rela… |
CVE-2017-7223 | High | 7.5 | 2017-03-22 | GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, pote… |
CVE-2014-9840 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file. |
CVE-2014-9839 | High | 7.5 | 2017-03-22 | magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access). |
CVE-2014-9836 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file. |
CVE-2014-9835 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. |
CVE-2014-9834 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. |
CVE-2014-9833 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. |
CVE-2014-9832 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. |
CVE-2017-7210 | Medium | 5.5 | 2017-03-21 | objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a… |
CVE-2014-9939 | Critical | 9.8 | 2017-03-21 | ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. |
CVE-2017-6836 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3… |
CVE-2017-6834 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0… |
CVE-2017-6832 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allow… |
CVE-2017-6831 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and… |
CVE-2017-6830 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of… |
CVE-2014-9847 | Critical | 9.8 | 2017-03-20 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. |
CVE-2014-9846 | Critical | 9.8 | 2017-03-20 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. |
CVE-2014-9845 | Medium | 5.5 | 2017-03-20 | The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file. |
CVE-2014-9843 | Critical | 9.8 | 2017-03-20 | The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors. |
CVE-2012-5361 | High | 7.8 | 2017-03-20 | Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file. |
CVE-2017-7187 | High | 7.8 | 2017-03-20 | The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or… |
CVE-2017-7186 | High | 7.5 | 2017-03-20 | libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application… |
CVE-2016-10253 | Critical | 9.8 | 2017-03-18 | An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a m… |
CVE-2017-3879 | Medium | 5.3 | 2017-03-17 | A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthe… |
CVE-2017-3878 | Medium | 5.3 | 2017-03-17 | A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an u… |
CVE-2017-3870 | Medium | 5.8 | 2017-03-17 | A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker t… |
CVE-2017-6880 | Critical | 9.8 | 2017-03-17 | Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact v… |
CVE-2017-6965 | Medium | 5.5 | 2017-03-17 | readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based… |
CVE-2017-0151 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0150 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0138 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0137 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0136 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0134 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0133 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0132 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0131 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0130 | High | 7.5 | 2017-03-17 | The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt… |
CVE-2017-0108 | High | 7.8 | 2017-03-17 | The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; S… |
CVE-2017-0103 | High | 7.0 | 2017-03-17 | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 mishandles registry objects in memory… |
CVE-2017-0102 | High | 7.8 | 2017-03-17 | Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511… |
CVE-2017-0101 | High | 7.8 | 2017-03-17 | The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012… |
CVE-2017-0094 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0090 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0089 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0088 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0087 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0086 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0084 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Wind… |
CVE-2017-0083 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0072 | High | 8.8 | 2017-03-17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted… |
CVE-2017-0071 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0067 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0053 | High | 7.8 | 2017-03-17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remot… |
CVE-2017-0052 | High | 7.8 | 2017-03-17 | Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
CVE-2017-0040 | High | 7.5 | 2017-03-17 | The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt… |
CVE-2017-0035 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0034 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that en… |
CVE-2017-0032 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0031 | High | 7.8 | 2017-03-17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial o… |
CVE-2017-0030 | High | 7.8 | 2017-03-17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on ShareP… |
CVE-2017-0023 | High | 7.5 | 2017-03-17 | The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute a… |
CVE-2017-0022 | Medium | 6.5 | 2017-03-17 | Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows… |
CVE-2017-0020 | High | 7.8 | 2017-03-17 | Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial… |
CVE-2017-0019 | High | 7.8 | 2017-03-17 | Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft O… |
CVE-2017-0018 | High | 7.5 | 2017-03-17 | Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site… |
CVE-2017-0015 | High | 7.5 | 2017-03-17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
CVE-2017-0006 | High | 7.8 | 2017-03-17 | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
CVE-2017-6949 | High | 8.1 | 2017-03-16 | An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory… |
CVE-2017-5505 | Medium | 5.5 | 2017-03-16 | The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted… |
CVE-2015-8981 | Critical | 9.8 | 2017-03-16 | Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vector… |
CVE-2017-6023 | Critical | 9.8 | 2017-03-16 | An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH vers… |
CVE-2017-5522 | Critical | 9.8 | 2017-03-15 | Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial… |
CVE-2017-6429 | High | 7.8 | 2017-03-15 | Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size… |
CVE-2017-5580 | High | 7.1 | 2017-03-15 | The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (ou… |
CVE-2017-5358 | Critical | 9.8 | 2017-03-15 | Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the server argument to t… |
CVE-2017-6852 | High | 7.8 | 2017-03-15 | Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted i… |
CVE-2017-6844 | High | 7.8 | 2017-03-15 | Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a… |
CVE-2017-6843 | High | 7.8 | 2017-03-15 | Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact v… |
CVE-2017-6828 | High | 7.8 | 2017-03-15 | Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to… |
CVE-2017-6827 | High | 7.8 | 2017-03-15 | Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows r… |
CVE-2017-6436 | Medium | 5.0 | 2017-03-15 | The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a cr… |
CVE-2017-6435 | Medium | 5.0 | 2017-03-15 | The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted… |
CVE-2017-6209 | Medium | 6.5 | 2017-03-15 | Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 al… |
CVE-2017-5994 | Medium | 5.5 | 2017-03-15 | Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to… |
CVE-2017-2997 | High | 8.8 | 2017-03-14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizi… |
CVE-2013-4659 | Critical | 9.8 | 2017-03-14 | Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of mul… |
CVE-2015-4409 | Medium | 6.5 | 2017-03-13 | Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service… |
CVE-2015-4408 | Medium | 6.5 | 2017-03-13 | Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service… |
CVE-2015-4407 | Medium | 6.5 | 2017-03-13 | Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service… |
CVE-2010-4314 | High | 8.8 | 2017-03-11 | Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the… |
CVE-2017-6596 | Medium | 5.5 | 2017-03-10 | partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An at… |
CVE-2017-6506 | Critical | 9.8 | 2017-03-10 | In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code execution. The attack… |
CVE-2017-6427 | High | 7.5 | 2017-03-10 | A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will cause a crash. An example attack methodol… |
CVE-2017-2788 | Critical | 10.0 | 2017-03-10 | A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's c… |