← Back
CWE-119

14,050 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,050)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-4834
1Microsoft
5Windows 2000
Windows Server 2003Windows Server 2008+2 more
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside...Show more
Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."Show less
CVE-2008-5262
1Devil
1Developers Image Library
Apr 23, 2026
Jan 13, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file.
CVE-2008-5876
1Irrlicht
1Irrlicht
Apr 23, 2026
Jan 8, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors in the B3D loader.
CVE-2008-4827
3Componentone
SapServantix
4Sap Gui
SizeroneTabone+1 more
Apr 23, 2026
Jan 8, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in...Show more
Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions.Show less
CVE-2008-0067
1Hp
1Openview Network Node Manager
Apr 23, 2026
Jan 8, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2...Show more
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.Show less
CVE-2008-5868
1Intellitamper
1Intellitamper
Apr 23, 2026
Jan 8, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via a long ProxyLogin value in a configuration (.cfg) file.
CVE-2009-0065
1Linux
1Linux Kernel
Apr 23, 2026
Jan 7, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FO...Show more
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.Show less
CVE-2008-5839
1Foxmail
1Foxmail
Apr 23, 2026
Jan 5, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element.
CVE-2008-5824
168k
1Audiofile
Apr 23, 2026
Jan 2, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file.
CVE-2008-5756
1Bpsoft
1Hex Workshop
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping (.cmap) file.
CVE-2008-5755
1Intellitamper
1Intellitamper
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494.
CVE-2008-5754
1Bpftp
1Bulletproof Ftp Client
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-File) with a long second line, possibly a related issue to CVE-2008-5753.
CVE-2008-5753
1Bpftp
1Bulletproof Ftp Client
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the q...Show more
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the quick-connect bar.Show less
CVE-2008-4539
4Canonical
DebianKvm Qumranet+1 more
4Debian Linux
KvmQemu+1 more
Apr 23, 2026
Dec 29, 2008
N/A· v4
N/A· v3
7.2 HIGH· v2
Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka t...Show more
Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.Show less
CVE-2008-5735
1Coolplayer
1Coolplayer
Apr 23, 2026
Dec 26, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.
CVE-2008-5722
1Sawstudio
1Sawstudio
Apr 23, 2026
Dec 26, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (prefer...Show more
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (preferences) file.Show less
CVE-2008-5711
1Facebook
1Photouploader
Apr 23, 2026
Dec 24, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.
CVE-2008-5557
1Php
1Php
Apr 23, 2026
Dec 23, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string contain...Show more
Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.Show less
CVE-2008-5514
1University Of Washington
1Imap
Apr 23, 2026
Dec 23, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows cont...Show more
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.Show less
CVE-2008-5702
1Linux
1Linux Kernel
Apr 23, 2026
Dec 22, 2008
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call.