# CVEs published 2005-10-11

10 CVEs were published on October 11, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1978](https://cve.now/CVE-2005-1978.md): COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbi (no CVSS)
- [CVE-2005-1979](https://cve.now/CVE-2005-1979.md): Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit (no CVSS)
- [CVE-2005-1980](https://cve.now/CVE-2005-1980.md): Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafte (no CVSS)
- [CVE-2005-2119](https://cve.now/CVE-2005-2119.md): The MIDL\_user\_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of mem (no CVSS)
- [CVE-2005-2128](https://cve.now/CVE-2005-2128.md): QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a craft (no CVSS)
- [CVE-2005-2925](https://cve.now/CVE-2005-2925.md): runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command (no CVSS)
- [CVE-2005-3119](https://cve.now/CVE-2005-3119.md): Memory leak in the request\_key\_auth\_destroy function in request\_key\_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a d (no CVSS)
- [CVE-2005-3179](https://cve.now/CVE-2005-3179.md): drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local (no CVSS)
- [CVE-2005-3180](https://cve.now/CVE-2005-3180.md): The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length (no CVSS)
- [CVE-2005-3181](https://cve.now/CVE-2005-3181.md): The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG\_AUDITSYSCALL is enabled, uses an incorrect function (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-10-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.