# CVEs published 2010-01-29

8 CVEs were published on January 29, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2624](https://cve.now/CVE-2009-2624.md): The huft\_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote… (no CVSS)
- [CVE-2009-4629](https://cve.now/CVE-2009-4629.md): Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is… (no CVSS)
- [CVE-2009-4630](https://cve.now/CVE-2009-4630.md): Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within… (no CVSS)
- [CVE-2010-0001](https://cve.now/CVE-2010-0001.md): Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others… (no CVSS)
- [CVE-2010-0004](https://cve.now/CVE-2010-0004.md): ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to… (no CVSS)
- [CVE-2010-0005](https://cve.now/CVE-2010-0005.md): query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root… (no CVSS)
- [CVE-2010-0463](https://cve.now/CVE-2010-0463.md): Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages… (no CVSS)
- [CVE-2010-0464](https://cve.now/CVE-2010-0464.md): Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-01-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.