← Back
CWE-119

14,646 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,646)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0397
1Gstreamer
2Good Plug Ins
Plug Ins
Apr 23, 2026
Feb 3, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, mi...Show more
Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file.Show less
CVE-2009-0387
1Gstreamer
2Good Plug Ins
Plug Ins
Apr 23, 2026
Feb 2, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application...Show more
Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to "mark keyframes."Show less
CVE-2009-0386
1Gstreamer
1Good Plug Ins
Apr 23, 2026
Feb 2, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code vi...Show more
Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file.Show less
CVE-2009-0351
1Wftpserver
1Winftp Ftp Server
Apr 23, 2026
Jan 29, 2009
N/A· v4
N/A· v3
9.0 HIGH· v2
Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code via a long LIST argument beginning with an * (asterisk) character.
CVE-2009-0350
1Merak
1Media Player
Apr 23, 2026
Jan 29, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, related to the status bar icon's tooltip. NOTE: some of these details ar...Show more
Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, related to the status bar icon's tooltip. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0349
1Ftpshell
1Ftpshell Server
Apr 23, 2026
Jan 29, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (ak...Show more
Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (aka .key) file.Show less
CVE-2009-0341
1Microsoft
1Internet Explorer
Apr 23, 2026
Jan 29, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulne...Show more
The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability.Show less
CVE-2009-0323
1W3
1Amaya
Apr 23, 2026
Jan 28, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAt...Show more
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag, which is not properly handled by the ProcessStartGI function; and unspecified vectors in (3) html2thot.c and (4) xml2thot.c, related to the msgBuffer variable. NOTE: these are different vectors than CVE-2008-6005.Show less
CVE-2008-6005
1W3c
1Amaya Web Browser
Apr 23, 2026
Jan 28, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "duplicated" attribute v...Show more
Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "duplicated" attribute value inputs.Show less
CVE-2007-2795
1Ipswitch
1Imail
Apr 23, 2026
Jan 27, 2009
N/A· v4
N/A· v3
9.0 HIGH· v2
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the...Show more
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon.Show less
CVE-2009-0298
1Mw6 Technologies
1Barcode Activex
Apr 23, 2026
Jan 27, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property.
CVE-2009-0270
1Fujitsu
1Systemcastwizard Lite
Apr 23, 2026
Jan 26, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet.
CVE-2009-0266
1Trilogic
1Media Player
Apr 23, 2026
Jan 26, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3l playlist file. NOTE: the provenance of this information is unknow...Show more
Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3l playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2009-0264
1Fujitsu
1Systemcastwizard Lite
Apr 23, 2026
Jan 26, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors.
CVE-2008-5260
1Axis
1Axis Camera Control
Apr 23, 2026
Jan 26, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long image_pan_tilt property value.
CVE-2009-0263
1Nullsoft
1Winamp
Apr 23, 2026
Jan 23, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a lar...Show more
Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.Show less
CVE-2009-0262
1Trilogic
1Media Player
Apr 23, 2026
Jan 23, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained fro...Show more
Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0261
1Effectmatrix
1Total Video Player
Apr 23, 2026
Jan 23, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\DefaultSkin\DefaultSkin.ini file with a large ColumnHeaderSpan value.
CVE-2009-0254
1Easyhdr
1Easyhdr
Apr 23, 2026
Jan 22, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file. NOTE: some of these details are obtained from third...Show more
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0246
1Easyhdr
1Easyhdr
Apr 23, 2026
Jan 22, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file.