Sign in Sign up
JA · EN · FR
SecPulse

Cwe 119

🧬 CWE Related 90
slug: cwe-119

Explanation

CWE-119は「C/C++など低レベル言語で、配列の確保された範囲外にデータを読み書きしてしまう欠陥」のことです。 バッファオーバーフローやヒープオーバーフローと呼ばれる古典的な脆弱性で、攻撃者はこれを使って任意のコード実行を狙います。 ブラウザ・OS・ファームウェアなど低レベルなシステムで頻発します。
📌 Example
Heartbleed (CVE-2014-0160): OpenSSL の境界外読み取り脆弱性で、サーバーのメモリから秘密鍵やパスワードが盗み見えるようになった。世界中のWebサイトの約1/3が影響を受けた。
🔗 Related links

🔖 Related tags

Cwe 20125 Cwe 78120 Cwe 787105 Cwe 41699 Cwe 2296 Cwe 9484 Cwe 50270 Cwe 7966 Cwe 8954 Cwe 91844 Cwe 28443 Cwe 28741 Cwe 7740 Cwe 30638 Cwe 84337

🛡 Vulnerabilities tagged with this 2,461

ID Title
CVE-2016-10055 Buffer Overflow in c (CVE-2016-10055)
CVE-2016-10056 Buffer Overflow in c (CVE-2016-10056)
CVE-2016-10057 Buffer Overflow in c (CVE-2016-10057)
CVE-2016-10059 Buffer Overflow in c (CVE-2016-10059)
CVE-2016-10254 Buffer Overflow in dos (CVE-2016-10254)
CVE-2016-10255 Buffer Overflow in c (CVE-2016-10255)
CVE-2017-6191 Buffer Overflow in apng-disassembler-project (CVE-2017-6191)
CVE-2017-3853 Buffer Overflow in cisco (CVE-2017-3853)
CVE-2017-7230 Buffer Overflow in disksorter (CVE-2017-7230)
CVE-2017-7231 Buffer Overflow in c (CVE-2017-7231)
CVE-2017-7223 Buffer Overflow in gnu (CVE-2017-7223)
CVE-2017-7227 Buffer Overflow in gnu (CVE-2017-7227)
CVE-2014-9832 Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
CVE-2014-9833 Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
CVE-2014-9834 Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
CVE-2014-9835 Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
CVE-2014-9836 ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
CVE-2014-9839 Buffer Overflow in dos (CVE-2014-9839)
CVE-2014-9840 Buffer Overflow in dos (CVE-2014-9840)
CVE-2014-9939 Buffer Overflow in c (CVE-2014-9939)
CVE-2017-7210 Buffer Overflow in c (CVE-2017-7210)
CVE-2017-6830 Buffer Overflow in cpp (CVE-2017-6830)
CVE-2017-6831 Buffer Overflow in cpp (CVE-2017-6831)
CVE-2017-6832 Buffer Overflow in cpp (CVE-2017-6832)
CVE-2017-6834 Buffer Overflow in cpp (CVE-2017-6834)
CVE-2017-6836 Buffer Overflow in dos (CVE-2017-6836)
CVE-2014-9847 The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
CVE-2012-5361 Buffer Overflow in ffmpeg (CVE-2012-5361)
CVE-2014-9843 Buffer Overflow in c (CVE-2014-9843)
CVE-2014-9845 Buffer Overflow in c (CVE-2014-9845)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →