Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2011-02-04 CVE-2011-0784 Race Condition vulnerability in Google Chrome
Race condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary code via vectors related to audio.
network
google CWE-362
6.8
2011-02-02 CVE-2011-0753 Race Condition vulnerability in PHP
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory corruption) via a large number of concurrent signals.
network
php CWE-362
4.3
2010-12-08 CVE-2010-4012 Race Condition vulnerability in Apple Iphone OS 4.0/4.1
Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button.
local
high complexity
apple CWE-362
6.2
2010-12-08 CVE-2010-2793 Race Condition vulnerability in Redhat Enterprise Virtualization Manager and Spice-Activex
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.
network
redhat CWE-362
6.8
2010-10-19 CVE-2010-3495 Race Condition vulnerability in Zope Zodb
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.
network
zope CWE-362
4.3
2010-10-19 CVE-2010-3494 Race Condition vulnerability in G.Rodola Pyftpdlib
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.
network
g-rodola CWE-362
4.3
2010-10-19 CVE-2010-3493 Race Condition vulnerability in Python 3.1/3.2
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
network
python CWE-362
4.3
2010-10-19 CVE-2009-5011 Race Condition vulnerability in G.Rodola Pyftpdlib
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a different vulnerability than CVE-2010-3494.
network
g-rodola CWE-362
4.3
2010-10-19 CVE-2009-5010 Race Condition vulnerability in G.Rodola Pyftpdlib
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, a different vulnerability than CVE-2010-3494.
network
g-rodola CWE-362
4.3
2010-09-16 CVE-2010-3412 Race Condition vulnerability in Google Chrome
Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors.
network
google CWE-362
critical
9.3