Vulnerabilities (CVE)

Filtered by CWE-119
Total 13333 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-1123 1 Monkey-project 1 Monkey 2025-04-03 5.0 MEDIUM N/A
Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a request for a zero byte file.
CVE-2005-3051 1 Igor Pavlov 1 7-zip 2025-04-03 9.3 HIGH N/A
Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.
CVE-2001-0576 1 Sco 1 Openserver 2025-04-03 4.6 MEDIUM N/A
lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.
CVE-2005-3185 3 Curl, Libcurl, Wget 3 Curl, Libcurl, Wget 2025-04-03 7.5 HIGH N/A
Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
CVE-2006-3086 1 Microsoft 1 Hyperlink Object Library 2025-04-03 9.3 HIGH N/A
Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long link in Unicode, aka "Hyperlink COM Object Buffer Overflow Vulnerability." NOTE: this is a different issue than CVE-2006-3059.
CVE-2006-0619 1 Qnx 1 Rtos 2025-04-03 4.6 MEDIUM N/A
Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library.
CVE-2004-1258 1 Moinejf 1 Abcm2ps 2025-04-03 10.0 HIGH N/A
Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files.
CVE-2002-2332 1 Opera Software 1 Opera Web Browser 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.
CVE-2006-3632 1 Ethereal Group 1 Ethereal 2025-04-03 10.0 HIGH N/A
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
CVE-2006-3462 1 Libtiff 1 Libtiff 2025-04-03 7.5 HIGH N/A
Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.
CVE-2002-2388 1 Inweb 1 Mail Server 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.
CVE-2001-0775 2 Xli, Xloadimage 2 Xli, Xloadimage 2025-04-03 7.5 HIGH N/A
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.
CVE-2003-1478 1 Kde 1 Konqueror 2025-04-03 4.3 MEDIUM N/A
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.
CVE-2005-4848 1 Rim 1 Blackberry Enterprise Server 2025-04-03 7.5 HIGH N/A
Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets.
CVE-2005-3483 2 Graphon, Microsoft 2 Go-global, Windows 2025-04-03 7.5 HIGH N/A
Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a data block that is longer than the specified data block size.
CVE-2001-0819 1 Fetchmail 1 Fetchmail 2025-04-03 7.5 HIGH N/A
A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header.
CVE-2005-0504 1 Linux 1 Linux Kernel 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.
CVE-2003-0096 1 Oracle 3 Database Server, Oracle8i, Oracle9i 2025-04-03 9.0 HIGH N/A
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.
CVE-2006-3912 1 Rarlab 1 Winrar 2025-04-03 2.1 LOW N/A
Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.
CVE-2006-4262 1 Cscope 1 Cscope 2025-04-03 5.1 MEDIUM N/A
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.