← Back
CWE-119

14,641 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,641)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-5756
1Bpsoft
1Hex Workshop
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping (.cmap) file.
CVE-2008-5755
1Intellitamper
1Intellitamper
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494.
CVE-2008-5754
1Bpftp
1Bulletproof Ftp Client
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-File) with a long second line, possibly a related issue to CVE-2008-5753.
CVE-2008-5753
1Bpftp
1Bulletproof Ftp Client
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the q...Show more
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the quick-connect bar.Show less
CVE-2008-4539
4Canonical
DebianKvm Qumranet+1 more
4Debian Linux
KvmQemu+1 more
Apr 23, 2026
Dec 29, 2008
N/A· v4
N/A· v3
7.2 HIGH· v2
Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka t...Show more
Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.Show less
CVE-2008-5735
1Coolplayer
1Coolplayer
Apr 23, 2026
Dec 26, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.
CVE-2008-5722
1Sawstudio
1Sawstudio
Apr 23, 2026
Dec 26, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (prefer...Show more
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (preferences) file.Show less
CVE-2008-5711
1Facebook
1Photouploader
Apr 23, 2026
Dec 24, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.
CVE-2008-5557
1Php
1Php
Apr 23, 2026
Dec 23, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string contain...Show more
Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.Show less
CVE-2008-5514
1University Of Washington
1Imap
Apr 23, 2026
Dec 23, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows cont...Show more
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.Show less
CVE-2008-5702
1Linux
1Linux Kernel
Apr 23, 2026
Dec 22, 2008
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call.
CVE-2008-5691
1Phonecian Casino
1Flashax
Apr 23, 2026
Dec 19, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute arbitrary code via a long argument to the SetID method.
CVE-2008-5078
1Gnu
1Escript
Apr 23, 2026
Dec 19, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code...Show more
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename.Show less
CVE-2008-5680
1Opera
1Opera Browser
Apr 23, 2026
Dec 19, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host nam...Show more
Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178.Show less
CVE-2008-5664
1Realtek
1Realtek Media Player
Apr 23, 2026
Dec 19, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file.
CVE-2008-5662
1Sun
1Java Wireless Toolkit For Cldc
Apr 23, 2026
Dec 17, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors.
CVE-2008-5616
1Mplayer
1Mplayer
Apr 23, 2026
Dec 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.
CVE-2008-5492
1Verypdf
1Verydoc Pdf Viewer
Apr 23, 2026
Dec 12, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF...Show more
Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-5419
1Emc
1Control Center
Apr 23, 2026
Dec 10, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests.
CVE-2008-5416
1Microsoft
1Sql Server
Apr 23, 2026
Dec 10, 2008
N/A· v4
N/A· v3
9.0 HIGH· v2
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE)...Show more
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability."Show less