# CVEs published 2008-10-02

8 CVEs were published on October 2, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4396](https://cve.now/CVE-2008-4396.md): Stack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly other versions, allows user-assisted remot (no CVSS)
- [CVE-2008-2831](https://cve.now/CVE-2008-2831.md): Multiple cross-site scripting (XSS) vulnerabilities in the delegated spam management feature in the Spam Quarantine Management (SQM) compone (no CVSS)
- [CVE-2008-3520](https://cve.now/CVE-2008-3520.md): Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, rel (no CVSS)
- [CVE-2008-3521](https://cve.now/CVE-2008-3521.md): Race condition in the jas\_stream\_tmpfile function in libjasper/base/jas\_stream.c in JasPer 1.900.1 allows local users to cause a denial of s (no CVSS)
- [CVE-2008-3522](https://cve.now/CVE-2008-3522.md): Buffer overflow in the jas\_stream\_printf function in libjasper/base/jas\_stream.c in JasPer 1.900.1 might allow context-dependent attackers t (no CVSS)
- [CVE-2008-3542](https://cve.now/CVE-2008-3542.md): Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors. (no CVSS)
- [CVE-2008-4381](https://cve.now/CVE-2008-4381.md): Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert f (no CVSS)
- [CVE-2008-4382](https://cve.now/CVE-2008-4382.md): Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.