OSVDB: Open Sourced Vulnerability Database

Creditee: Matthew Daley

Known Contact Information:

None at this time

Known Affiliations:

via Secunia (as of 2012-06-07)

Disclosed Vulnerabilities (9):

Disc. Date	OSVDB ID	CVEID	Title
2012-09-05	85199	2012-3497 2012-6030 2012-6031 2012-6032 2012-6033 2012-6034 2012-6035 2012-6036	Xen Transcendent Memory (TMEM) Hypercall Multiple Sub-operation Validation Weakness Local Privilege Escalation
2012-09-05	85198	2012-3498	Xen PHYSDEVOP_map_pirq Array Indexing Local DoS
2012-09-05	85202	2012-3495	Xen PHYSDEVOP_get_free_pirq Hypercall Physical IRQ Allocation get_free_pirq Call Return Value Verification Local Privilege Escalation
2012-09-05	85200	2012-3496	Xen XENMEM_populate_physmap Macro MEMF_populate_on_demand Flag Handling Local DoS
2012-06-07	82737	2012-0280	GEAR CD DVD Filter Driver 0x00222000 IOCTL Non-paged Pool Overflow Local Privilege Escalation
2012-06-07	82738	2012-0281	GEAR CD DVD Filter Driver 0x00222000 IOCTL SCSI Pass Through SCSI Message Parsing Local Privilege Escalation
2012-05-07	81737	2012-2330‏	Node.js HTTP Parser String Parsing HTTP Header Disclosure
2012-04-13	81339	2012-2089	nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
2012-03-15	80124	2012-1180	nginx HTTP Header Response Parsing Freed Memory Information Disclosure

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.