# CVEs published 2008-06-16

31 CVEs were published on June 16, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2719](https://cve.now/CVE-2008-2719.md): Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of (no CVSS)
- [CVE-2008-2720](https://cve.now/CVE-2008-2720.md): Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-2721](https://cve.now/CVE-2008-2721.md): Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albu (no CVSS)
- [CVE-2008-2722](https://cve.now/CVE-2008-2722.md): Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive. (no CVSS)
- [CVE-2008-2723](https://cve.now/CVE-2008-2723.md): embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remot (no CVSS)
- [CVE-2008-2724](https://cve.now/CVE-2008-2724.md): Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remo (no CVSS)
- [CVE-2008-2714](https://cve.now/CVE-2008-2714.md): Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to (no CVSS)
- [CVE-2008-2715](https://cve.now/CVE-2008-2715.md): Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the imag (no CVSS)
- [CVE-2008-2716](https://cve.now/CVE-2008-2716.md): Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by mod (no CVSS)
- [CVE-2008-2717](https://cve.now/CVE-2008-2717.md): TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, (no CVSS, typo3/cms-core)
- [CVE-2008-2718](https://cve.now/CVE-2008-2718.md): Cross-site scripting (XSS) vulnerability in fe\_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, as used (no CVSS)
- [CVE-2008-2711](https://cve.now/CVE-2008-2711.md): fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persi (no CVSS)
- [CVE-2008-2712](https://cve.now/CVE-2008-2712.md): Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properl (no CVSS)
- [CVE-2008-2713](https://cve.now/CVE-2008-2713.md): libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an o (no CVSS)
- [CVE-2008-2708](https://cve.now/CVE-2008-2708.md): Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv\_9 (no CVSS)
- [CVE-2008-2709](https://cve.now/CVE-2008-2709.md): Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a (no CVSS)
- [CVE-2008-2710](https://cve.now/CVE-2008-2710.md): Integer signedness error in the ip\_set\_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip\_multi.c in the kernel in Sun S (no CVSS)
- [CVE-2008-1377](https://cve.now/CVE-2008-1377.md): The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAutho (no CVSS)
- [CVE-2008-1379](https://cve.now/CVE-2008-1379.md): Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attack (no CVSS)
- [CVE-2008-1806](https://cve.now/CVE-2008-1806.md): Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length v (no CVSS)
- [CVE-2008-1807](https://cve.now/CVE-2008-1807.md): FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font B (no CVSS)
- [CVE-2008-1808](https://cve.now/CVE-2008-1808.md): Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in (no CVSS)
- [CVE-2008-2360](https://cve.now/CVE-2008-2360.md): Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attacke (no CVSS)
- [CVE-2008-2361](https://cve.now/CVE-2008-2361.md): Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependen (no CVSS)
- [CVE-2008-2362](https://cve.now/CVE-2008-2362.md): Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitra (no CVSS)
- [CVE-2008-0071](https://cve.now/CVE-2008-0071.md): The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause (no CVSS)
- [CVE-2008-2366](https://cve.now/CVE-2008-2366.md): Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 an (no CVSS)
- [CVE-2008-2639](https://cve.now/CVE-2008-2639.md): Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to exe (no CVSS)
- [CVE-2008-2705](https://cve.now/CVE-2008-2705.md): Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Se (no CVSS)
- [CVE-2008-2706](https://cve.now/CVE-2008-2706.md): Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by subm (no CVSS)
- [CVE-2008-2707](https://cve.now/CVE-2008-2707.md): Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv\_93 allows remote attackers to cause a denial of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.