← Back
CWE-119

14,646 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,646)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-1377
1Openssl
1Openssl
Apr 23, 2026
May 19, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records th...Show more
The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."Show less
CVE-2009-1252
1Ntp
1Ntp
Apr 23, 2026
May 19, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via...Show more
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.Show less
CVE-2009-1675
1Electrasoft
132bit Ftp
Apr 23, 2026
May 18, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command.
CVE-2009-1674
1Microchip
1Mplab Ide
Apr 23, 2026
May 18, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a .mcp file, possibly a related issue to CV...Show more
Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a .mcp file, possibly a related issue to CVE-2009-1608.Show less
CVE-2009-1672
1Sun
1Jre
Apr 23, 2026
May 18, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launc...Show more
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method.Show less
CVE-2009-1671
1Sun
1Jre
Apr 23, 2026
May 18, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to execute arbitrary code via a long string ar...Show more
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, or (5) launch method.Show less
CVE-2009-1667
1Mini Stream
1Castripper
Apr 23, 2026
May 18, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a different vector than CVE-2009-5137.
CVE-2009-1660
1Urusoft
1Viplay3
Apr 23, 2026
May 18, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file entry in a .vpl file.
CVE-2009-1647
1Ultrafunk
1Popcorn
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response. NOTE: some of these details are obtain...Show more
Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-1646
1Mini Stream
1Mini Stream Rm Downloader
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.
CVE-2009-1645
1Mini Stream
1Easy Rm Mp3 Converter
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a...Show more
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.Show less
CVE-2009-1644
1Sorinara
1Streaming Audio Player
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file.
CVE-2009-1643
1Sorinara
1Soritong Mp3 Player
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a crafted .m3u file.
CVE-2009-1642
1Mini Stream
1Mini Stream To Mp3 Converter
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a R...Show more
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also subsequently reported in "prior to 3.1.3.7."Show less
CVE-2009-1641
1Mini Stream
1Ripper
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in...Show more
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.Show less
CVE-2009-1640
1Nucleustechnologies
1Kernel Recovery
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file.
CVE-2009-1639
1Nucleustechnologies
1Kernel Recovery
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file.
CVE-2009-0688
1Carnegie Mellon University
1Cyrus Sasl
Apr 23, 2026
May 15, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl...Show more
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.Show less
CVE-2009-0158
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
May 13, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long hostname for a telnet s...Show more
Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long hostname for a telnet server.Show less
CVE-2009-0157
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
May 13, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers.