Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,075)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3621 1Apple 2Iphone Os Itunes Apr 29, 2026 Sep 13, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.Show less
CVE-2012-3607 1Apple 2Iphone Os Itunes Apr 29, 2026 Sep 13, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.Show less
CVE-2012-3606 1Apple 2Iphone Os Itunes Apr 29, 2026 Sep 13, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.Show less
CVE-2012-3935 1Cisco 2Jabber Extensible Communications Platform Unified Presence Apr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, a...Show more Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.Show less
CVE-2012-2410 1Realnetworks 2Realplayer Realplayer Sp Apr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other...Show more Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2409.Show less
CVE-2012-2409 1Realnetworks 2Realplayer Realplayer Sp Apr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other...Show more Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2410.Show less
CVE-2012-2408 1Realnetworks 2Realplayer Realplayer Sp Apr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly ha...Show more The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.Show less
CVE-2012-2407 1Realnetworks 2Realplayer Realplayer Sp Apr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other...Show more Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data unpacking.Show less
CVE-2012-2774 1Ffmpeg 1Ffmpeg Apr 29, 2026 Sep 10, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP...Show more The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP state."Show less
CVE-2012-4876 1Trendnet 2Securview Wireless Internet Camera Securview Wireless Internet Camera Activex Control Apr 29, 2026 Sep 6, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.
CVE-2012-4875 1Artifex 1Gpl Ghostscript Apr 29, 2026 Sep 6, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document...Show more Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document. NOTE: as of 20120314, the developer was not able to reproduce the issue and disputed itShow less
CVE-2012-4865 1Oreans 1Themida Apr 29, 2026 Sep 6, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.
CVE-2012-3535 1Uclouvain 1Openjpeg Apr 29, 2026 Sep 5, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.
CVE-2012-3012 1Arbiter 2Power Sentinel Power Sentinel 1133a Firmware Apr 29, 2026 Sep 5, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service (Ethernet outage) via unspecified Ethernet traffic that fills a buffer, as demonstrated...Show more The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service (Ethernet outage) via unspecified Ethernet traffic that fills a buffer, as demonstrated by a port scan.Show less
CVE-2012-0275 1Adobe 2Photoshop Cs5.5 Photoshop Cs6 Apr 29, 2026 Sep 4, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image wit...Show more Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.Show less
CVE-2012-2114 1Etalabs 1Musl Apr 29, 2026 Aug 31, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string to an unbuffered stream...Show more Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string to an unbuffered stream such as stderr.Show less
CVE-2010-5194 1Viscomsoft 2Image Viewer Cp Gold Sdk Image Viewer Cp Pro Sdk Apr 29, 2026 Aug 31, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execut...Show more Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter.Show less
CVE-2010-5193 1Viscomsoft 2Image Viewer Cp Gold Sdk Image Viewer Cp Pro Sdk Apr 29, 2026 Aug 31, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary...Show more Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.Show less
CVE-2012-3534 2Gnugk Opensuse 3Gnu Gatekeeper LeapOpensuse Apr 29, 2026 Aug 31, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.
CVE-2012-2869 2Google Opensuse 2Chrome Opensuse Apr 29, 2026 Aug 31, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a "stale buffer."

Previous 1...530531532...704 Next