# CVEs published 2010-12-16

52 CVEs were published on December 16, 2010: 0 critical, 2 high. Days are UTC.

- [CVE-2009-5032](https://cve.now/CVE-2009-5032.md): The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without… (no CVSS)
- [CVE-2009-5033](https://cve.now/CVE-2009-5033.md): IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a " \*" argument sequence for a certain tell command, which allows remote… (no CVSS)
- [CVE-2009-5034](https://cve.now/CVE-2009-5034.md): IBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of service (memory consumption and daemon… (no CVSS)
- [CVE-2009-5035](https://cve.now/CVE-2009-5035.md): The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync… (no CVSS)
- [CVE-2009-5036](https://cve.now/CVE-2009-5036.md): traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service (daemon crash)… (no CVSS)
- [CVE-2010-4544](https://cve.now/CVE-2010-4544.md): Cross-site scripting (XSS) vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject… (no CVSS)
- [CVE-2010-4545](https://cve.now/CVE-2010-4545.md): IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (resource consumption and sync… (no CVSS)
- [CVE-2010-4546](https://cve.now/CVE-2010-4546.md): IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy… (no CVSS)
- [CVE-2010-4547](https://cve.now/CVE-2010-4547.md): IBM Lotus Notes Traveler before 8.5.1.3, when a multidomain environment is used, does not properly apply policy documents to mobile users… (no CVSS)
- [CVE-2010-4548](https://cve.now/CVE-2010-4548.md): IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (daemon crash) by accepting a… (no CVSS)
- [CVE-2010-4549](https://cve.now/CVE-2010-4549.md): IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited… (no CVSS)
- [CVE-2010-4550](https://cve.now/CVE-2010-4550.md): IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service (sync failure) via a malformed document. (no CVSS)
- [CVE-2010-4551](https://cve.now/CVE-2010-4551.md): IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and… (no CVSS)
- [CVE-2010-4552](https://cve.now/CVE-2010-4552.md): Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service (memory consumption and daemon… (no CVSS)
- [CVE-2010-4553](https://cve.now/CVE-2010-4553.md): An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to… (no CVSS)
- [CVE-2010-2569](https://cve.now/CVE-2010-2569.md): pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an… (no CVSS)
- [CVE-2010-2570](https://cve.now/CVE-2010-2570.md): Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010… (no CVSS)
- [CVE-2010-2571](https://cve.now/CVE-2010-2571.md): Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to… (no CVSS)
- [CVE-2010-2742](https://cve.now/CVE-2010-2742.md): The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is… (no CVSS)
- [CVE-2010-3338](https://cve.now/CVE-2010-3338.md): The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly… (no CVSS)
- [CVE-2010-3340](https://cve.now/CVE-2010-3340.md): Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by… (no CVSS)
- [CVE-2010-3342](https://cve.now/CVE-2010-3342.md): Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access… (no CVSS)
- [CVE-2010-3343](https://cve.now/CVE-2010-3343.md): Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by… (no CVSS)
- [CVE-2010-3345](https://cve.now/CVE-2010-3345.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by… (no CVSS)
- [CVE-2010-3346](https://cve.now/CVE-2010-3346.md): Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2010-3348](https://cve.now/CVE-2010-3348.md): Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access… (no CVSS)
- [CVE-2010-3937](https://cve.now/CVE-2010-3937.md): Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and… (no CVSS)
- [CVE-2010-3939](https://cve.now/CVE-2010-3939.md): Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1… (no CVSS)
- [CVE-2010-3940](https://cve.now/CVE-2010-3940.md): Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows… (no CVSS)
- [CVE-2010-3941](https://cve.now/CVE-2010-3941.md): Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows… (CVSS 8.4)
- [CVE-2010-3942](https://cve.now/CVE-2010-3942.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows… (no CVSS)
- [CVE-2010-3943](https://cve.now/CVE-2010-3943.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows… (no CVSS)
- [CVE-2010-3944](https://cve.now/CVE-2010-3944.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which… (no CVSS)
- [CVE-2010-3945](https://cve.now/CVE-2010-3945.md): Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack… (no CVSS)
- [CVE-2010-3946](https://cve.now/CVE-2010-3946.md): Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter… (no CVSS)
- [CVE-2010-3947](https://cve.now/CVE-2010-3947.md): Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and… (no CVSS)
- [CVE-2010-3949](https://cve.now/CVE-2010-3949.md): Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote… (no CVSS)
- [CVE-2010-3950](https://cve.now/CVE-2010-3950.md): The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert… (no CVSS)
- [CVE-2010-3951](https://cve.now/CVE-2010-3951.md): Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote… (no CVSS)
- [CVE-2010-3952](https://cve.now/CVE-2010-3952.md): The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to… (no CVSS)
- [CVE-2010-3954](https://cve.now/CVE-2010-3954.md): Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS)
- [CVE-2010-3955](https://cve.now/CVE-2010-3955.md): pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows… (no CVSS)
- [CVE-2010-3956](https://cve.now/CVE-2010-3956.md): The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server… (no CVSS)
- [CVE-2010-3957](https://cve.now/CVE-2010-3957.md): Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista… (CVSS 7.3)
- [CVE-2010-3959](https://cve.now/CVE-2010-3959.md): The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server… (no CVSS)
- [CVE-2010-3960](https://cve.now/CVE-2010-3960.md): Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a… (no CVSS)
- [CVE-2010-3961](https://cve.now/CVE-2010-3961.md): The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not… (no CVSS)
- [CVE-2010-3963](https://cve.now/CVE-2010-3963.md): Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2… (no CVSS)
- [CVE-2010-3964](https://cve.now/CVE-2010-3964.md): Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when… (no CVSS)
- [CVE-2010-3965](https://cve.now/CVE-2010-3965.md): Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista… (no CVSS)
- [CVE-2010-3966](https://cve.now/CVE-2010-3966.md): Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users… (no CVSS)
- [CVE-2010-3967](https://cve.now/CVE-2010-3967.md): Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.