Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,074)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-0249 1Apple 1Quicktime Apr 29, 2026 Aug 4, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSC atoms in a QuickTime movie file.
CVE-2011-0248 1Apple 1Quicktime Apr 29, 2026 Aug 4, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (appli...Show more Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.Show less
CVE-2011-0247 1Apple 1Quicktime Apr 29, 2026 Aug 4, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie.
CVE-2011-0246 1Apple 1Quicktime Apr 29, 2026 Aug 4, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.
CVE-2011-0245 1Apple 1Quicktime Apr 29, 2026 Aug 4, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pict file.
CVE-2011-2704 2Osgeo Umn 2Mapserver Mapserver Apr 29, 2026 Aug 1, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.
CVE-2011-2962 1Invensys 1Wonderware Information Server Apr 29, 2026 Jul 29, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified Ac...Show more Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls.Show less
CVE-2011-2961 1Sunwayland 1Pnetpower Apr 29, 2026 Jul 29, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDP packet.
CVE-2011-2960 1Sunwayland 1Forcecontrol Apr 29, 2026 Jul 29, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL.
CVE-2011-2959 17t 1Igss Apr 29, 2026 Jul 29, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (IGSS) 9 and earlier allows remote attackers to cause a denial of service...Show more Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (IGSS) 9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet to TCP port 22202.Show less
CVE-2011-2667 2Broadcom Ca 2Gateway Security Total Defense Apr 29, 2026 Jul 28, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a d...Show more Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.Show less
CVE-2011-2696 1Mega Nerd 1Libsndfile Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-ba...Show more Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.Show less
CVE-2011-2588 1Videolan 1Vlc Media Player Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly...Show more Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file.Show less
CVE-2011-2587 1Videolan 1Vlc Media Player Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or po...Show more Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file.Show less
CVE-2011-2882 1Citrix 1Access Gateway Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to e...Show more Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.Show less
CVE-2011-2685 1Libreoffice 1Libreoffice Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file.
CVE-2011-1797 2Apple Chromium Project 3Chromium SafariWebkit Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-1462 1Apple 2Safari Webkit Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-1457 1Apple 2Safari Webkit Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-1453 1Apple 2Safari Webkit Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less

Previous 1...565566567...704 Next