CWE-131 · Incorrect Calculation of Buffer Size (page 3)
Page 3 of 3 — CVEs classified under CWE-131, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-2103 | Critical | 9.8 | 2005-08-16 | Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute ar… |
CVE-2005-0490 | High | 8.8 | 2005-05-02 | Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via… |
CVE-2004-0940 | High | 7.8 | 2005-02-09 | Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as… |
CVE-2004-0747 | High | 7.8 | 2004-10-20 | Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of env… |
CVE-2004-1363 | Critical | 9.8 | 2004-08-04 | Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded af… |
CVE-2004-0434 | Critical | 9.8 | 2004-07-07 | k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is… |
CVE-2003-0899 | Critical | 9.8 | 2003-11-03 | Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' charac… |
CVE-2002-1347 | Critical | 9.8 | 2002-12-18 | Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (… |
CVE-2002-0184 | High | 7.8 | 2002-05-16 | Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special c… |
CVE-2001-0334 | High | 7.5 | 2001-06-27 | FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expande… |
CVE-2001-0249 | Critical | 9.8 | 2001-06-18 | Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which… |
CVE-2001-0248 | Critical | 9.8 | 2001-06-18 | Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which… |