# CVEs published 2007-01-24

13 CVEs were published on January 24, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6952](https://cve.now/CVE-2006-6952.md): Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow (no CVSS)
- [CVE-2007-0444](https://cve.now/CVE-2007-0444.md): Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, (no CVSS)
- [CVE-2007-0018](https://cve.now/CVE-2007-0018.md): Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote (no CVSS)
- [CVE-2007-0010](https://cve.now/CVE-2007-0010.md): The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of se (no CVSS)
- [CVE-2005-4824](https://cve.now/CVE-2005-4824.md): PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2007-0020](https://cve.now/CVE-2007-0020.md): Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote attackers to execute arb (no CVSS)
- [CVE-2007-0023](https://cve.now/CVE-2007-0023.md): The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, a (no CVSS)
- [CVE-2007-0460](https://cve.now/CVE-2007-0460.md): Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors r (no CVSS)
- [CVE-2007-0461](https://cve.now/CVE-2007-0461.md): Multiple memory leaks in the Dazuko anti-virus helper module before 2.3.2 allow attackers to cause a denial of service (memory consumption) (no CVSS)
- [CVE-2007-0468](https://cve.now/CVE-2007-0468.md): Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote at (no CVSS)
- [CVE-2007-0469](https://cve.now/CVE-2007-0469.md): The extract\_files function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows (no CVSS, rubygems-update)
- [CVE-2007-0470](https://cve.now/CVE-2007-0470.md): Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified ve (no CVSS)
- [CVE-2007-0471](https://cve.now/CVE-2007-0471.md): sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.