CVE-2011-1234

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-1235

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-0666

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-0094

A use-after-free memory corruption vulnerability exists in Microsoft Internet Explorer 6 and 7 within the MSHTML library . The flaw is triggered in the CSpliceTreeEngine::InsertSplice() function when handling layouts; it occurs when an object's memory is freed but a reference remains, allowing an...

CVE-2011-0667

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-0666

CVE-2011-0666 is a use-after-free vulnerability in the Windows kernel-mode driver win32k.sys affecting Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold, SP1). The issue arises from incorrect driver object manageme...

CVE-2011-0665

The CVE-2011-0665 issue concerns a use-after-free vulnerability in the Windows kernel-mode driver win32k.sys. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/SP2/R2 and R2 SP1, and Windows 7 Gold/SP1. Root cause: incorrect man...

CVE-2011-1553

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different...

CVE-2011-1553

The CVE-2011-1553 family concerns t1lib, embedded by TeX Live/teTeX and Xpdf, with multiple flaws: two heap-based AFM parsing buffer overflows (CVE-2010-2642, CVE-2011-0433), an invalid pointer dereference (CVE-2011-0764), a use-after-free (CVE-2011-1553), an off-by-one error (CVE-2011-1554), and...

Design/Logic Flaw

Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-0284

Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...

CVE-2011-0284

Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...

CVE-2011-0284

CVE-2011-0284 affects MIT Kerberos 5 (krb5) 1.7–1.9 with PKINIT enabled; a double-free in the KDC’s prepare_error_as path (do_as_req.c) enables a remote attacker to crash the daemon or potentially execute code via an e_data field containing typed data. Several advisories (MiracleLinux, Oracle Lin...

MIT Kerberos 5 double free

Double free vulnerability on PKINIT...

Google Chrome Multiple Vulnerabilities (Mar 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0001

CVE-2011-0001 affects the Linux SCSI Target Framework (tgt) tgtd daemon prior to version 1.0.14 (scsi-target-utils). The vulnerability is a double-free in iscsi_rx_handler (usr/iscsi/iscsid.c) that can cause memory corruption and a crash; remote attackers may trigger this via network/blob-related...

MIT KDC vulnerable to double-free when PKINIT enabled

Overview The KDC in releases krb5-1.7 and later are vulnerable to a double-free vulnerability if they are configured to respond to PKINIT requests. Description The MIT krb5 Security Advisory 2011-003 states:"The MIT Kerberos 5 Key Distribution Center KDC daemon is vulnerable to a double-free...

CVE-2011-1195

Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "document script lifetime handling."...

CVE-2011-1191

Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of DOM URLs...

Debian DSA-2188-1 : webkit - several vulnerabilities

Several vulnerabilities have been discovered in WebKit, a Web content engine library for GTK+. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1783 WebKit does not properly handle dynamic modification of a text node, which allows remote attackers to...