1668
Reference Description
https://www.cve.org/CVERecord?id=CVE-2009-1532
CVE-2009-0269 chain: -1 value from a function call was intended to indicate an error, but is
used as an array index instead.
https://www.cve.org/CVERecord?id=CVE-2009-0269
CVE-2002-2227 Unchecked length of SSLv2 challenge value leads to buffer underflow.
https://www.cve.org/CVERecord?id=CVE-2002-2227
CVE-2007-4580 Buffer underflow from a small size value with a large buffer (length parameter
inconsistency, CWE-130)
https://www.cve.org/CVERecord?id=CVE-2007-4580
CVE-2007-4268 Chain: integer signedness error (CWE-195) passes signed comparison,
leading to heap overflow (CWE-122)
https://www.cve.org/CVERecord?id=CVE-2007-4268
CVE-2009-2550 Classic stack-based buffer overflow in media player using a long entry in a
playlist
https://www.cve.org/CVERecord?id=CVE-2009-2550
CVE-2009-2403 Heap-based buffer overflow in media player using a long entry in a playlist
https://www.cve.org/CVERecord?id=CVE-2009-2403
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1366 ICS Communications: Frail Security in Protocols 1358 2503
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
MemberOf 1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous
Software Weaknesses
1425 2600
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
ISA/IEC 62443 Part 3-3 Req SR 3.5
ISA/IEC 62443 Part 4-1 Req SI-1
ISA/IEC 62443 Part 4-1 Req SI-2
ISA/IEC 62443 Part 4-1 Req SVV-1
ISA/IEC 62443 Part 4-1 Req SVV-3
ISA/IEC 62443 Part 4-2 Req CR 3.5
References
[REF-1029]Aleph One. "Smashing The Stack For Fun And Profit". 1996 November 8. < http://
phrack.org/issues/49/14.html >.
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
CWE Version 4.14
CWE-788: Access of Memory Location After End of Buffer
CWE-788: Access of Memory Location After End of Buffer