← Back
CWE-119

14,074 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,074)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-1274
1Microsoft
5Excel
Excel ViewerOffice+2 more
Apr 29, 2026
Jun 16, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP...Show more
Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds Array Access Vulnerability."Show less
CVE-2011-1273
1Microsoft
5Excel
Excel ViewerOffice+2 more
Apr 29, 2026
Jun 16, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 Fi...Show more
Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability."Show less
CVE-2011-1260
1Microsoft
1Internet Explorer
Apr 29, 2026
Jun 16, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka...Show more
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."Show less
CVE-2011-1924
1Tor
1Tor
Apr 29, 2026
Jun 14, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a l...Show more
Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.Show less
CVE-2011-1708
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie.
CVE-2011-1817
1Google
1Chrome
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2011-1707
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.
CVE-2011-1706
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url.
CVE-2011-1705
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.
CVE-2011-1704
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted core-package parameter in a printer-url.
CVE-2011-1703
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted driver-version parameter in a printer-url.
CVE-2011-1702
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url.
CVE-2011-1701
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.
CVE-2011-1700
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url.
CVE-2011-1699
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted uri parameter in a printer-url.
CVE-2011-2217
2Tomsawyer
Vmware
3Get Extension Factory
InfrastructureVirtual Infrastructure Client
Apr 29, 2026
Jun 6, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before...Show more
Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly handle attempted initialization within Internet Explorer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document.Show less
CVE-2011-1959
1Wireshark
1Wireshark
Apr 29, 2026
Jun 6, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (appli...Show more
The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.Show less
CVE-2011-2328
1Hp
1Loadrunner
Apr 29, 2026
Jun 2, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a .usr (aka Virtual User script) file with long directives.
CVE-2011-1220
1Ibm
1Tivoli Management Framework
Apr 29, 2026
Jun 2, 2011
N/A· v4
N/A· v3
9.0 HIGH· v2
Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.
CVE-2011-1938
1Php
1Php
Apr 29, 2026
May 31, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.