Vulnerabilities (CVE)

Filtered by CWE-119
Total 13573 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-5130 1 Websense 1 Websense Email Security 2026-06-16 4.3 MEDIUM N/A
The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachment with a crafted size.
CVE-2009-5129 1 Websense 1 Websense V10000 2026-06-16 5.0 MEDIUM N/A
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login attempt with an incorrect password.
CVE-2009-5128 1 Websense 1 Websense V10000 2026-06-16 5.0 MEDIUM N/A
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large file that is not properly handled during buffering.
CVE-2009-5124 1 Comodo 1 Comodo Internet Security 2026-06-16 4.3 MEDIUM N/A
The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (application crash) via a crafted packed file.
CVE-2009-5123 1 Comodo 1 Comodo Internet Security 2026-06-16 4.3 MEDIUM N/A
The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consumption) via a crafted compressed file.
CVE-2009-5109 1 Mini-stream 1 Ripper 2026-06-16 9.3 HIGH N/A
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.
CVE-2009-5030 1 Uclouvain 1 Openjpeg 2026-06-16 6.8 MEDIUM N/A
The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."
CVE-2009-5028 1 Namazu 1 Namazu 2026-06-16 7.5 HIGH N/A
Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted request containing an empty uri field.
CVE-2009-5022 1 Libtiff 1 Libtiff 2026-06-16 6.8 MEDIUM N/A
Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file.
CVE-2009-5018 1 Catb 1 Gif2png 2026-06-16 6.8 MEDIUM N/A
Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png.
CVE-2009-4988 1 Sap 1 Business One 2005-a 2026-06-16 10.0 HIGH N/A
Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000.
CVE-2009-4964 1 Ksplayer 1 Ksp Sound Player 2026-06-16 9.3 HIGH N/A
Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file.
CVE-2009-4962 1 Adammo 1 Fat Player 2026-06-16 9.3 HIGH N/A
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information.
CVE-2009-4932 1 Mpesch3.de1 1 1by1 2026-06-16 6.8 MEDIUM N/A
Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file.
CVE-2009-4931 1 Bestwebsharing 1 Groovy Media Player 2026-06-16 6.8 MEDIUM N/A
Stack-based buffer overflow in Groovy Media Player 1.1.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file.
CVE-2009-4919 1 Cisco 1 Asa 5580 2026-06-16 10.0 HIGH N/A
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121.
CVE-2009-4902 1 Muscle 1 Pcsc-lite 2026-06-16 6.8 MEDIUM N/A
Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0407.
CVE-2009-4901 1 Muscle 1 Pcsc-lite 2026-06-16 2.1 LOW N/A
The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407.
CVE-2009-4897 1 Artifex 3 Afpl Ghostscript, Ghostscript Fonts, Gpl Ghostscript 2026-06-16 9.3 HIGH N/A
Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name.
CVE-2009-4893 1 Unrealircd 1 Unrealircd 2026-06-16 6.8 MEDIUM N/A
Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.