← Back
CWE-119

14,050 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,050)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1518
1Kaspersky Lab
2Kaspersky Anti Virus
Kaspersky Internet Security
Apr 23, 2026
Jun 5, 2008
N/A· v4
N/A· v3
7.2 HIGH· v2
Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call.
CVE-2008-2541
1Ca
1Etrust Secure Content Manager
Apr 23, 2026
Jun 4, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses...Show more
Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command; (2) the PASV command; and (3) directories, files, and links in a LIST command.Show less
CVE-2008-2404
1Sun
1Java Asp Server
Apr 23, 2026
Jun 4, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field.
CVE-2008-1109
1Gnome
1Evolution
Apr 23, 2026
Jun 4, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in t...Show more
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).Show less
CVE-2008-1108
1Gnome
1Evolution
Apr 23, 2026
Jun 4, 2008
N/A· v4
N/A· v3
7.6 HIGH· v2
Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.
CVE-2008-2548
1Motorola
1Razr
Apr 23, 2026
Jun 4, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malf...Show more
Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption.Show less
CVE-2008-2547
1Microsoft
1Windows Installer
Apr 23, 2026
Jun 4, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x (aka /uninstall) op...Show more
Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x (aka /uninstall) option. NOTE: this issue might cross privilege boundaries if msiexec.exe is reachable via components such as ActiveX controls, and might additionally require a separate vulnerability in the control.Show less
CVE-2008-1661
1Hp
1Storageworks Storage Mirroring
Apr 23, 2026
Jun 4, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.
CVE-2008-2514
1Ibm
1Aix
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in errpt in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown attack vectors.
CVE-2008-2513
1Ibm
1Aix
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in the kernel in IBM AIX 5.2, 5.3, and 6.1 allows local users to execute arbitrary code in kernel mode via unknown attack vectors.
CVE-2008-2426
1Carsten Haitzler
1Imlib2
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header,...Show more
Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c.Show less
CVE-2008-2363
1Pan
1Pan
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary...Show more
The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.Show less
CVE-2008-2099
1Vmware
4Ace 2
Vmware Player 2Vmware Workstation+1 more
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrar...Show more
Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.Show less
CVE-2008-2098
1Vmware
5Ace 2
FusionVmware Player 2+2 more
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion...Show more
Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.Show less
CVE-2008-1574
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image that triggers a heap-based buffe...Show more
Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image that triggers a heap-based buffer overflow.Show less
CVE-2008-1573
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
7.1 HIGH· v2
The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (memory contents) via a crafted (1) BMP or (2) GIF image, which causes an out-of-bo...Show more
The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (memory contents) via a crafted (1) BMP or (2) GIF image, which causes an out-of-bounds read.Show less
CVE-2008-1031
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Jun 2, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
CoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document, related to an uninitialized variable.
CVE-2008-2503
1Sourceforge
1Emule X Ray
Apr 23, 2026
May 29, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors.
CVE-2008-2499
1Ibm
1Lotus Sametime
Apr 23, 2026
May 29, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted...Show more
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.Show less
CVE-2008-2158
1Emc Corporation
1Alphastor
Apr 23, 2026
May 29, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.