Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2017-04-20 CVE-2015-8957 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Imagemagick
Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file.
network
low complexity
imagemagick CWE-119
6.5
2017-04-20 CVE-2016-4650 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
local
low complexity
apple CWE-119
7.8
2017-04-20 CVE-2016-4293 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hancom Office 2014 9.1.0.2176
Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document (.cell) file.
local
low complexity
hancom CWE-119
7.8
2017-04-20 CVE-2017-7938 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mor-Pah.Net Dmitry Deepmagic Information Gathering Tool 1.3A
Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument.
network
low complexity
mor-pah-net CWE-119
critical
9.8
2017-04-19 CVE-2017-7961 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Gnome Libcroco 0.6.11/0.6.12
The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file.
local
low complexity
gnome CWE-119
7.8
2017-04-17 CVE-2016-3036 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM Cognos Business Intelligence 10.1/10.2/10.2.2
IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets.
network
low complexity
ibm CWE-119
7.5
2017-04-13 CVE-2017-7853 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GNU Osip 5.0.0
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
network
low complexity
gnu CWE-119
7.5
2017-04-13 CVE-2016-10326 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GNU Osip 4.1.0
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS.
network
low complexity
gnu CWE-119
7.5
2017-04-13 CVE-2016-10325 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GNU Osip 4.1.0
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS.
network
low complexity
gnu CWE-119
7.5
2017-04-13 CVE-2016-10324 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GNU Osip 4.1.0
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.
network
low complexity
gnu CWE-119
critical
9.8