PHP '_php_mb_regex_ereg_replace_exec' function double release vulnerability

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A double-release vulnerability exists in PHP's phpmbregexeregreplaceexec function, which can be exploited by an...

PHP 'wddx_deserialize' function double release vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A double-release vulnerability exists in PHP's wddxdeserialize function, which can be exploited by a remote attacker to execute arbitrary code...

libEBML Double Release Vulnerability

libEBML is a C++ library maintained by the Matroska team for parsing EBML an audio/video framework files. A double release vulnerability exists in libEBML. An attacker can exploit this vulnerability by leveraging the Track element of the MKV container to cause post-release reuse...

PHP Double Release Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Apple iOS Double Release Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. A double release vulnerability exists in Apple iOS versions prior to 9.1, and OS X versions prior to 10.11.1. The vulnerability allows an attacker to perform arbitrary file write operations via a crafted application tha...

GnuTLS 'gnutls_x509_ext_import_crl_dist_points()' double release vulnerability

GnuTLS is a set of secure communication libraries for implementing SSL, TLS and DTLS protocols. A double-release vulnerability exists in the GnuTLS 'gnutlsx509extimportcrldistpoints' function, which could be exploited by an attacker to submit an ad-hoc request to cause a denial of service, or...

Adobe Flash Player Double Release Vulnerability (CNVD-2015-02524)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. Adobe Flash Player suffers from a double release vulnerability. The vulnerability allows attackers to build...

Microsoft Windows "Win32k.sys" 双重释放本地权限提升漏洞(MS10-098)

BUGTRAQ ID: 45287 CVE ID: CVE-2010-3941 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Win32k.sys驱动实现上存在双重释放漏洞，本地攻击者可利用此漏洞以内核级别的权限执行任意代码，从而完全控制受影响的计算机。 Microsoft Windows XP Microsoft Vista Microsoft Server 2008 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-098）以及相应补丁:...

Interwoven WorkSite Web TransferCtrl Class控件双重释放漏洞

BUGTRAQ ID: 28628 CVECAN ID: CVE-2008-1617 Worksite是Interwoven发布的文档和邮件管理解决方案。 Worksite的iManFile.cab文件所安装的Web TransferCtrl Class ActiveX控件（CLSID：4BECECDE-E494-4f69-A3DE-DA0B77726307）在处理Server属性时存在双重释放漏洞。如果用户受骗访问了恶意站点的话，就可以触发这个漏洞，导致执行任意指令。 Interwoven WorkSite 8.2 Interwoven ----------...