Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-1889 1Microsoft 1Forefront Threat Management Gateway Apr 22, 2026 Jun 16, 2011 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall...Show more The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."Show less
CVE-2011-1868 1Microsoft 3Windows 2003 Server Windows Server 2003Windows Xp Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a...Show more The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."Show less
CVE-2011-1279 1Microsoft 3Excel OfficeOpen Xml File Format Converter Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attack...Show more Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."Show less
CVE-2011-1278 1Microsoft 2Excel Office Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (mem...Show more Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."Show less
CVE-2011-1277 1Microsoft 3Excel OfficeOpen Xml File Format Converter Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitra...Show more Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."Show less
CVE-2011-1276 1Microsoft 5Excel Excel ViewerOffice+2 more Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2...Show more Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet, related to improper validation of record information, aka "Excel Buffer Overrun Vulnerability."Show less
CVE-2011-1275 1Microsoft 3Excel OfficeOpen Xml File Format Converter Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to...Show more Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Heap Overwrite Vulnerability."Show less
CVE-2011-1274 1Microsoft 5Excel Excel ViewerOffice+2 more Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP...Show more Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds Array Access Vulnerability."Show less
CVE-2011-1273 1Microsoft 5Excel Excel ViewerOffice+2 more Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 Fi...Show more Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability."Show less
CVE-2011-1260 1Microsoft 1Internet Explorer Apr 29, 2026 Jun 16, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka...Show more Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."Show less
CVE-2011-1924 1Tor 1Tor Apr 29, 2026 Jun 14, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a l...Show more Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.Show less
CVE-2011-1708 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie.
CVE-2011-1817 1Google 1Chrome Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2011-1707 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.
CVE-2011-1706 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url.
CVE-2011-1705 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.
CVE-2011-1704 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted core-package parameter in a printer-url.
CVE-2011-1703 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted driver-version parameter in a printer-url.
CVE-2011-1702 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url.
CVE-2011-1701 1Novell 1Iprint Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.

Previous 1...599600601...734 Next