# CVEs published 2012-10-10

40 CVEs were published on October 10, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2286](https://cve.now/CVE-2012-2286.md): Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain… (no CVSS)
- [CVE-2012-4467](https://cve.now/CVE-2012-4467.md): The (1) do\_siocgstamp and (2) do\_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order… (no CVSS)
- [CVE-2012-5166](https://cve.now/CVE-2012-5166.md): ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote… (no CVSS)
- [CVE-2009-5067](https://cve.now/CVE-2009-5067.md): Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2012-3040](https://cve.now/CVE-2012-3040.md): Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to… (no CVSS)
- [CVE-2012-3504](https://cve.now/CVE-2012-3504.md): The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on… (no CVSS)
- [CVE-2012-4430](https://cve.now/CVE-2012-4430.md): The dump\_resource function in dird/dird\_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote… (no CVSS)
- [CVE-2012-4445](https://cve.now/CVE-2012-4445.md): Heap-based buffer overflow in the eap\_server\_tls\_process\_fragment function in eap\_server\_tls\_common.c in the EAP authentication server in… (no CVSS)
- [CVE-2012-4454](https://cve.now/CVE-2012-4454.md): openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a… (no CVSS)
- [CVE-2012-4455](https://cve.now/CVE-2012-4455.md): openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1)… (no CVSS)
- [CVE-2012-4463](https://cve.now/CVE-2012-4463.md): Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC\_EXT\_SELECTED or (2) MC\_EXT\_ONLYTAGGED environment variables when… (no CVSS)
- [CVE-2012-4465](https://cve.now/CVE-2012-4465.md): Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a… (no CVSS)
- [CVE-2012-4899](https://cve.now/CVE-2012-4899.md): WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover… (no CVSS)
- [CVE-2012-5355](https://cve.now/CVE-2012-5355.md): welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file… (no CVSS)
- [CVE-2012-5356](https://cve.now/CVE-2012-5356.md): The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x… (no CVSS)
- [CVE-2012-3982](https://cve.now/CVE-2012-3982.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird… (no CVSS)
- [CVE-2012-3983](https://cve.now/CVE-2012-3983.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before… (no CVSS)
- [CVE-2012-3984](https://cve.now/CVE-2012-3984.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page… (no CVSS)
- [CVE-2012-3985](https://cve.now/CVE-2012-3985.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy… (no CVSS)
- [CVE-2012-3986](https://cve.now/CVE-2012-3986.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey… (no CVSS)
- [CVE-2012-3987](https://cve.now/CVE-2012-3987.md): Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote attackers to… (no CVSS)
- [CVE-2012-3988](https://cve.now/CVE-2012-3988.md): Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x… (no CVSS)
- [CVE-2012-3989](https://cve.now/CVE-2012-3989.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable… (no CVSS)
- [CVE-2012-3990](https://cve.now/CVE-2012-3990.md): Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8… (no CVSS)
- [CVE-2012-3991](https://cve.now/CVE-2012-3991.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey… (no CVSS)
- [CVE-2012-3992](https://cve.now/CVE-2012-3992.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey… (no CVSS)
- [CVE-2012-3993](https://cve.now/CVE-2012-3993.md): The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0… (no CVSS)
- [CVE-2012-3994](https://cve.now/CVE-2012-3994.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey… (no CVSS)
- [CVE-2012-3995](https://cve.now/CVE-2012-3995.md): The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird… (no CVSS)
- [CVE-2012-4179](https://cve.now/CVE-2012-4179.md): Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before… (no CVSS)
- [CVE-2012-4180](https://cve.now/CVE-2012-4180.md): Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x… (no CVSS)
- [CVE-2012-4181](https://cve.now/CVE-2012-4181.md): Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before… (no CVSS)
- [CVE-2012-4182](https://cve.now/CVE-2012-4182.md): Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8… (no CVSS)
- [CVE-2012-4183](https://cve.now/CVE-2012-4183.md): Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before… (no CVSS)
- [CVE-2012-4184](https://cve.now/CVE-2012-4184.md): The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0… (no CVSS)
- [CVE-2012-4185](https://cve.now/CVE-2012-4185.md): Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before… (no CVSS)
- [CVE-2012-4186](https://cve.now/CVE-2012-4186.md): Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8… (no CVSS)
- [CVE-2012-4187](https://cve.now/CVE-2012-4187.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey… (no CVSS)
- [CVE-2012-4188](https://cve.now/CVE-2012-4188.md): Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before… (no CVSS)
- [CVE-2012-5354](https://cve.now/CVE-2012-5354.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-10-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.