# CVEs published 2008-12-29

7 CVEs were published on December 29, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4539](https://cve.now/CVE-2008-4539.md): Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow (no CVSS)
- [CVE-2008-5745](https://cve.now/CVE-2008-5745.md): Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, (no CVSS)
- [CVE-2008-5746](https://cve.now/CVE-2008-5746.md): Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink a (no CVSS)
- [CVE-2008-5747](https://cve.now/CVE-2008-5747.md): F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that (no CVSS)
- [CVE-2008-5748](https://cve.now/CVE-2008-5748.md): Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2008-5749](https://cve.now/CVE-2008-5749.md): Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the (no CVSS)
- [CVE-2008-5750](https://cve.now/CVE-2008-5750.md): Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary comm (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.