1803
Reference Description
CVE-2008-2785 chain/composite: use of incorrect data type for a reference counter allows an
overflow of the counter, leading to a free of memory that is still in use.
https://www.cve.org/CVERecord?id=CVE-2008-2785
CVE-2008-5410 Improper reference counting leads to failure of cryptographic operations.
https://www.cve.org/CVERecord?id=CVE-2008-5410
CVE-2009-1709 chain: improper reference counting in a garbage collection routine leads to
use-after-free
https://www.cve.org/CVERecord?id=CVE-2009-1709
CVE-2009-3553 chain: reference count not correctly maintained when client disconnects during
a large operation, leading to a use-after-free.
https://www.cve.org/CVERecord?id=CVE-2009-3553
CVE-2009-3624 Reference count not always incremented, leading to crash or code execution.
https://www.cve.org/CVERecord?id=CVE-2009-3624
CVE-2010-0176 improper reference counting leads to expired pointer dereference.
https://www.cve.org/CVERecord?id=CVE-2010-0176
CVE-2010-0623 OS kernel increments reference count twice but only decrements once, leading
to resource consumption and crash.
https://www.cve.org/CVERecord?id=CVE-2010-0623
CVE-2010-2549 OS kernel driver allows code execution
https://www.cve.org/CVERecord?id=CVE-2010-2549
CVE-2010-4593 improper reference counting leads to exhaustion of IP addresses
https://www.cve.org/CVERecord?id=CVE-2010-4593
CVE-2011-0695 Race condition causes reference counter to be decremented prematurely,
leading to the destruction of still-active object and an invalid pointer
dereference.
https://www.cve.org/CVERecord?id=CVE-2011-0695
CVE-2012-4787 improper reference counting leads to use-after-free
https://www.cve.org/CVERecord?id=CVE-2012-4787
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
References
[REF-884]Mateusz "j00ru" Jurczyk. "Windows Kernel Reference Count Vulnerabilities - Case
Study". 2012 November. < https://j00ru.vexillium.org/slides/2012/zeronights.pdf >.2023-04-07.
CWE-912: Hidden Functionality
Weakness ID : 912
Structure : Simple
Abstraction : Class
Description
The product contains functionality that is not documented, not part of the specification, and not
accessible through an interface or command sequence that is obvious to the product's users or
administrators.
Extended Description
CWE Version 4.14
CWE-912: Hidden Functionality
CWE-912: Hidden Functionality