← Back
CWE-119

14,050 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,050)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0262
1Trilogic
1Media Player
Apr 23, 2026
Jan 23, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained fro...Show more
Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0261
1Effectmatrix
1Total Video Player
Apr 23, 2026
Jan 23, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\DefaultSkin\DefaultSkin.ini file with a large ColumnHeaderSpan value.
CVE-2009-0254
1Easyhdr
1Easyhdr
Apr 23, 2026
Jan 22, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file. NOTE: some of these details are obtained from third...Show more
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0246
1Easyhdr
1Easyhdr
Apr 23, 2026
Jan 22, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file.
CVE-2009-0007
1Apple
1Quicktime
Apr 23, 2026
Jan 21, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid im...Show more
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.Show less
CVE-2009-0004
1Apple
1Quicktime
Apr 23, 2026
Jan 21, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file.
CVE-2009-0003
1Apple
1Quicktime
Apr 23, 2026
Jan 21, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value i...Show more
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.Show less
CVE-2009-0002
1Apple
1Quicktime
Apr 23, 2026
Jan 21, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms.
CVE-2009-0001
1Apple
1Quicktime
Apr 23, 2026
Jan 21, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.
CVE-2008-3865
1Trend Micro
3Internet Security 2007
Internet Security 2008Officescan
Apr 23, 2026
Jan 21, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Intern...Show more
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.Show less
CVE-2009-0241
1Ganglia
1Ganglia
Apr 23, 2026
Jan 21, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service (crash) via a request to the gmetad service with a long pathname.
CVE-2009-0181
1Vuplayer
1Vuplayer
Apr 23, 2026
Jan 20, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters.
CVE-2009-0176
1Research In Motion Limited
3Blackberry Enterprise Server
Blackberry Professional SoftwareBlackberry Unite
Apr 23, 2026
Jan 20, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBer...Show more
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."Show less
CVE-2009-0175
1Heathcosoft
1Mp3 Trackmaker
Apr 23, 2026
Jan 20, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an invalid .mp3 file.
CVE-2009-0174
1Vuplayer
1Vuplayer
Apr 23, 2026
Jan 20, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.
CVE-2008-5911
1Realnetworks
2Helix Server
Helix Server Mobile
Apr 23, 2026
Jan 20, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or e...Show more
Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.Show less
CVE-2009-0135
1Amarok
1Amarok
Apr 23, 2026
Jan 16, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a l...Show more
Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a large (1) nlen or (2) vlen Tag value, each of which triggers a heap-based buffer overflow.Show less
CVE-2009-0133
1Microsoft
1Html Help Workshop
Apr 23, 2026
Jan 15, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
CVE-2008-5902
1Xrdp
1Xrdp
Apr 23, 2026
Jan 15, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request.
CVE-2009-0119
1Microsoft
1Windows Xp
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .chm file.