Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,679)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-2718 1Adobe 2Acrobat Acrobat Reader Apr 29, 2026 May 16, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulne...Show more Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.Show less
CVE-2013-1680 1Mozilla 3Firefox ThunderbirdThunderbird Esr Apr 29, 2026 May 16, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attacke...Show more Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.Show less
CVE-2013-1678 1Mozilla 3Firefox ThunderbirdThunderbird Esr Apr 29, 2026 May 16, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary co...Show more The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.Show less
CVE-2013-1676 1Mozilla 3Firefox ThunderbirdThunderbird Esr Apr 29, 2026 May 16, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrar...Show more The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.Show less
CVE-2013-1346 1Microsoft 1Malware Protection Engine Apr 29, 2026 May 15, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVE-2013-1334 1Microsoft 8Windows 7 Windows 8Windows Rt+5 more Apr 29, 2026 May 15, 2013 N/A· v4 N/A· v3 7.2 HIGH· v2 win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT doe...Show more win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."Show less
CVE-2013-1333 1Microsoft 1Windows 7 Apr 29, 2026 May 15, 2013 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffe...Show more Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability."Show less
CVE-2013-1332 1Microsoft 6Windows 7 Windows 8Windows Rt+3 more Apr 29, 2026 May 15, 2013 N/A· v4 N/A· v3 7.2 HIGH· v2 dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does no...Show more dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."Show less
CVE-2013-1320 1Microsoft 1Publisher Apr 29, 2026 May 15, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
CVE-2013-1302 1Microsoft 3Lync Lync ServerOffice Communicator Apr 29, 2026 May 15, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access...Show more Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."Show less
CVE-2013-2021 3Canonical ClamavSuse 3Clamav Linux Enterprise ServerUbuntu Linux Apr 29, 2026 May 13, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file.
CVE-2013-1918 1Xen 1Xen Apr 29, 2026 May 13, 2013 N/A· v4 N/A· v3 4.7 MEDIUM· v2 Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."
CVE-2013-0946 1Emc 1Alphastor Apr 29, 2026 May 10, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
CVE-2013-0726 1Hexagon 1Erdas Er Viewer Apr 29, 2026 May 5, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.
CVE-2013-1234 1Cisco 1Ios Xr Apr 29, 2026 May 3, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (process restart) via crafted SNMP packets, aka Bug ID CSCue69472.
CVE-2013-1091 1Novell 1Iprint Apr 29, 2026 May 2, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2013-1884 1Apache 1Subversion Apr 29, 2026 May 2, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which trigg...Show more The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.Show less
CVE-2013-1846 2Apache Opensuse 2Opensuse Subversion Apr 29, 2026 May 2, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an ac...Show more The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.Show less
CVE-2013-1845 2Apache Opensuse 2Opensuse Subversion Apr 29, 2026 May 2, 2013 N/A· v4 N/A· v3 2.1 LOW· v2 The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a la...Show more The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory.Show less
CVE-2013-1230 1Cisco 1Unified Communications Domain Manager Apr 29, 2026 May 1, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Unified Communications Domain Manager allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets, aka Bug ID CSCug47057.

Previous 1...540541542...734 Next