CVE-1999-0041
Buffer overflow in NLS (Natural Language Service).
All CVEs associated with "Buffer Overflow". Page 160/160 • 19109 CVEs.
Subscribe CVEs: RSS for “Buffer Overflow” · RSS (High+Critical only)
A curated feed of “Buffer Overflow”-related CVEs appears below. We currently track 19109 CVEs for this tag (all time). In the last 365 days, 2728 were published. Average CVSS is 7.9 (all time; 8.0 over 365d), and 78% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer, CWE-121 - Stack-based Buffer Overflow, CWE-122 - Heap-based Buffer Overflow.
In our taxonomy this topic maps to a HIGH impact class. Common exploitation patterns for this weakness can lead to high. Use the filters to triage high risk first and validate exposure in your environment. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
Buffer overflow in NLS (Natural Language Service).
Buffer overflow in ffbconfig in Solaris 2.5.1.
Buffer overflow of rlogin program using TERM environmental variable.
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
Buffer overflow in listserv allows arbitrary command execution.
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
Buffer overflow in HP-UX newgrp program.
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
Buffer overflow in mstm in HP-UX allows local users to gain root access.
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
Buffer overflow in Linux splitvt command gives root access to local users.
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.