Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-0593 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2012-0592 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2012-0591 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2873 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2872 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2871 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2870 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2869 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2868 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2867 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2011-2866 1Apple 2Itunes Webkit Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.Show less
CVE-2011-2833 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2012-0397 1Rsa 1Securid Software Token Converter Apr 29, 2026 Mar 6, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
CVE-2012-0201 1Ibm 1Personal Communications Apr 29, 2026 Mar 2, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkS...Show more Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.Show less
CVE-2012-0870 2Rim Samba 3Blackberry Playbook Os Blackberry Playbook TabletSamba Apr 29, 2026 Feb 23, 2012 N/A· v4 N/A· v3 7.9 HIGH· v2 Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of servi...Show more Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.Show less
CVE-2012-0243 1Advantech 1Advantech Webaccess Apr 29, 2026 Feb 21, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code by leveraging the ability to write arbitrary content to any pathname.
CVE-2012-0241 1Advantech 1Advantech Webaccess Apr 29, 2026 Feb 21, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream identifier to a function.
CVE-2012-0238 1Advantech 1Advantech Webaccess Apr 29, 2026 Feb 21, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2012-0237 1Advantech 1Advantech Webaccess Apr 29, 2026 Feb 21, 2012 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date and time syncing via a crafted URL.
CVE-2011-4526 1Advantech 1Advantech Webaccess Apr 29, 2026 Feb 21, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters.

Previous 1...581582583...734 Next