← Back
CWE-119

14,640 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,640)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-5178
1Opera
1Opera
Apr 23, 2026
Nov 20, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this might overlap CVE-2008-5680.
CVE-2008-5177
1Insight Tech
1Yosemite Backup
Apr 23, 2026
Nov 20, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute arbitrary code on a Linux platform, related to libytlindtb.so; or (2) cause a denial of service (appli...Show more
Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute arbitrary code on a Linux platform, related to libytlindtb.so; or (2) cause a denial of service (application crash) and possibly execute arbitrary code on a Windows platform, related to ytwindtb.dll; via a long username field during authentication.Show less
CVE-2008-5176
1Clientsoftware
1Wincom Mpd Total
Apr 23, 2026
Nov 20, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (...Show more
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.Show less
CVE-2008-5134
1Linux
1Linux Kernel
Apr 23, 2026
Nov 18, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an "invalid beac...Show more
Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an "invalid beacon/probe response."Show less
CVE-2008-5120
1Hp
1Openvms
Apr 23, 2026
Nov 18, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string.
CVE-2008-5025
1Linux
1Linux Kernel
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
7.8 HIGH· v2
Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesys...Show more
Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.Show less
CVE-2008-0014
1Trend Micro
1Serverprotect
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a d...Show more
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0013.Show less
CVE-2008-0013
1Trend Micro
1Serverprotect
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a d...Show more
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0014.Show less
CVE-2008-0012
1Trend Micro
1Serverprotect
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a d...Show more
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0013 and CVE-2008-0014.Show less
CVE-2007-0074
1Trend Micro
1Serverprotect
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a folder read operation over RPC...Show more
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a folder read operation over RPC.Show less
CVE-2007-0073
1Trend Micro
1Serverprotect
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a file read operation over RPC.
CVE-2007-0072
1Trend Micro
1Serverprotect
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a read operation over RPC.
CVE-2006-5269
1Trend Micro
1Serverprotect
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, probably related to an RPC interface.
CVE-2008-5106
1Karjasoft
1Sami Ftp Server
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the o...Show more
Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console. NOTE: this may overlap CVE-2006-0441 and CVE-2006-2212.Show less
CVE-2008-5101
1Optipng
1Optipng
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."
CVE-2008-3623
1Apple
1Safari
Apr 23, 2026
Nov 17, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cau...Show more
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.Show less
CVE-2008-5094
1Novell
1Edirectory
Apr 23, 2026
Nov 14, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
CVE-2008-5092
1Novell
1Edirectory
Apr 23, 2026
Nov 14, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
CVE-2008-5091
1Novell
1Edirectory
Apr 23, 2026
Nov 14, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
CVE-2008-5073
1Novell
1Zenworks Desktop Management
Apr 23, 2026
Nov 14, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method.