Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,074)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-2031 1Kingsoft 1Webshield Apr 29, 2026 May 24, 2010 N/A· v4 N/A· v3 7.2 HIGH· v2 KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel memory via a crafted request to IOCTL 0x830020d4 on the KAVSafe device.
CVE-2010-2028 1Mgenti 1Tftputil Gui Apr 29, 2026 May 24, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long transport mode.
CVE-2010-1688 12brightsparks 1Syncback Apr 29, 2026 May 24, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) .sps or (2)...Show more Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) .sps or (2) zip profile.Show less
CVE-2010-2009 1Bsplayer 1Bs.player Apr 29, 2026 May 21, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in...Show more Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party information.Show less
CVE-2010-2004 1Bsplayer 1Bs.player Apr 29, 2026 May 20, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a ski...Show more Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a skins file (.bsi), a different vulnerability than CVE-2009-1068.Show less
CVE-2010-1628 1Artifex 1Gpl Ghostscript Apr 29, 2026 May 19, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption...Show more Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.Show less
CVE-2010-0998 1Freedownloadmanager 1Free Download Manager Apr 29, 2026 May 17, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites featur...Show more Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect.Show less
CVE-2010-1510 1Irfanview 1Irfanview Apr 29, 2026 May 14, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PSD image with RLE compression.
CVE-2010-1509 1Irfanview 1Irfanview Apr 29, 2026 May 14, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary...Show more IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a "sign-extension error."Show less
CVE-2010-1291 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-201...Show more Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1290.Show less
CVE-2010-1290 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-201...Show more Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1291.Show less
CVE-2010-1289 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-201...Show more Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1290, and CVE-2010-1291.Show less
CVE-2010-1288 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors.
CVE-2010-1287 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-201...Show more Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.Show less
CVE-2010-1286 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-201...Show more Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.Show less
CVE-2010-1284 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-201...Show more Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.Show less
CVE-2010-1555 1Hp 1Openview Network Node Manager Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid Hostname parameter.
CVE-2010-1554 1Hp 1Openview Network Node Manager Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid iCount parameter.
CVE-2010-1553 1Hp 1Openview Network Node Manager Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid MaxAge parameter.
CVE-2010-1552 1Hp 1Openview Network Node Manager Apr 29, 2026 May 13, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the act and app parameters.

Previous 1...600601602...704 Next