Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2017-07-05 CVE-2017-10729 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview 4.44
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."
local
low complexity
irfanview CWE-119
7.8
2017-07-05 CVE-2017-10728 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Winamp 5.666
Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
local
low complexity
winamp CWE-119
7.8
2017-07-05 CVE-2017-10727 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Winamp 5.666
Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Branch Selection starting at in_mp3!DeleteAudioDecoder+0x000000000000762f."
local
low complexity
winamp CWE-119
7.8
2017-07-05 CVE-2017-10726 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Winamp 5.666
Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951."
local
low complexity
winamp CWE-119
7.8
2017-07-05 CVE-2017-10725 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Winamp 5.666
Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at in_flv!winampGetInModule2+0x00000000000009a8."
local
low complexity
winamp CWE-119
7.3
2017-07-05 CVE-2017-10929 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Radare Radare2 1.5.0
The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02.
local
low complexity
radare CWE-119
7.8
2017-07-05 CVE-2017-10921 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in XEN
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.
network
low complexity
xen CWE-119
critical
10.0
2017-07-05 CVE-2017-10920 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in XEN
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.
network
low complexity
xen CWE-119
critical
10.0
2017-07-02 CVE-2017-10794 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Graphicsmagick 1.3.25
When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode.
local
low complexity
graphicsmagick CWE-119
5.5
2017-07-02 CVE-2017-8893 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Aeroadmin 4.1
AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet.
network
low complexity
aeroadmin CWE-119
7.5