# CVEs published 2012-05-24

33 CVEs were published on May 24, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2517](https://cve.now/CVE-2011-2517.md): Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging… (no CVSS)
- [CVE-2011-2518](https://cve.now/CVE-2011-2518.md): The tomoyo\_mount\_acl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kern\_path function with arguments… (no CVSS)
- [CVE-2011-2521](https://cve.now/CVE-2011-2521.md): The x86\_assign\_hw\_event function in arch/x86/kernel/cpu/perf\_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39… (no CVSS)
- [CVE-2011-2699](https://cve.now/CVE-2011-2699.md): The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination… (no CVSS)
- [CVE-2011-2707](https://cve.now/CVE-2011-2707.md): The ptrace\_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which… (no CVSS)
- [CVE-2011-2898](https://cve.now/CVE-2011-2898.md): net/packet/af\_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures… (no CVSS)
- [CVE-2011-2918](https://cve.now/CVE-2011-2918.md): The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with… (no CVSS)
- [CVE-2011-3188](https://cve.now/CVE-2011-3188.md): The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and… (no CVSS)
- [CVE-2011-3191](https://cve.now/CVE-2011-3191.md): Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to… (no CVSS)
- [CVE-2011-3353](https://cve.now/CVE-2011-3353.md): Buffer overflow in the fuse\_notify\_inval\_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a… (no CVSS)
- [CVE-2011-3359](https://cve.now/CVE-2011-3359.md): The dma\_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which… (no CVSS)
- [CVE-2011-3363](https://cve.now/CVE-2011-3363.md): The setup\_cifs\_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows… (no CVSS)
- [CVE-2011-4080](https://cve.now/CVE-2011-4080.md): The sysrq\_sysctl\_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP\_SYS\_ADMIN capability to… (no CVSS)
- [CVE-2011-4081](https://cve.now/CVE-2011-4081.md): crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS)… (no CVSS)
- [CVE-2011-3103](https://cve.now/CVE-2011-3103.md): Google V8, as used in Google Chrome before 19.0.1084.52, does not properly perform garbage collection, which allows remote attackers to… (no CVSS)
- [CVE-2011-3104](https://cve.now/CVE-2011-3104.md): Skia, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (out-of-bounds read) via… (no CVSS)
- [CVE-2011-3105](https://cve.now/CVE-2011-3105.md): Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 19.0.1084.52 allows remote… (no CVSS)
- [CVE-2011-3106](https://cve.now/CVE-2011-3106.md): The WebSockets implementation in Google Chrome before 19.0.1084.52 does not properly handle use of SSL, which allows remote attackers to… (no CVSS)
- [CVE-2011-3107](https://cve.now/CVE-2011-3107.md): Google Chrome before 19.0.1084.52 does not properly implement JavaScript bindings for plug-ins, which allows remote attackers to cause a… (no CVSS)
- [CVE-2011-3108](https://cve.now/CVE-2011-3108.md): Use-after-free vulnerability in Google Chrome before 19.0.1084.52 allows remote attackers to execute arbitrary code via vectors related to… (no CVSS)
- [CVE-2011-3109](https://cve.now/CVE-2011-3109.md): Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to… (no CVSS)
- [CVE-2011-3110](https://cve.now/CVE-2011-3110.md): The PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2011-3111](https://cve.now/CVE-2011-3111.md): Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (invalid read operation) via… (no CVSS)
- [CVE-2011-3112](https://cve.now/CVE-2011-3112.md): Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2011-3113](https://cve.now/CVE-2011-3113.md): The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of… (no CVSS)
- [CVE-2011-3114](https://cve.now/CVE-2011-3114.md): Multiple buffer overflows in the PDF functionality in Google Chrome before 19.0.1084.52 allow remote attackers to cause a denial of… (no CVSS)
- [CVE-2011-3115](https://cve.now/CVE-2011-3115.md): Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service or possibly have unspecified… (no CVSS)
- [CVE-2012-2042](https://cve.now/CVE-2012-2042.md): Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified… (no CVSS)
- [CVE-2011-2906](https://cve.now/CVE-2011-2906.md): Integer signedness error in the pmcraid\_ioctl\_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow… (no CVSS)
- [CVE-2011-5090](https://cve.now/CVE-2011-5090.md): GR Board (aka grboard) 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote… (no CVSS)
- [CVE-2011-5091](https://cve.now/CVE-2011-5091.md): Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2012-1172](https://cve.now/CVE-2012-1172.md): The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid \[ (open square bracket) characters in… (no CVSS)
- [CVE-2012-1821](https://cve.now/CVE-2012-1821.md): The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.