# CVEs published 2009-01-20 19 CVEs were published on January 20, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2007-6720](https://cve.now/CVE-2007-6720.md): libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded son (no CVSS) - [CVE-2008-2367](https://cve.now/CVE-2008-2367.md): Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows loc (no CVSS) - [CVE-2008-2368](https://cve.now/CVE-2008-2368.md): Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified othe (no CVSS) - [CVE-2008-4388](https://cve.now/CVE-2008-4388.md): The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly val (no CVSS) - [CVE-2008-5516](https://cve.now/CVE-2008-5516.md): The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related (no CVSS) - [CVE-2008-5912](https://cve.now/CVE-2008-5912.md): An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when the (no CVSS) - [CVE-2008-5913](https://cve.now/CVE-2008-5913.md): The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey befor (no CVSS) - [CVE-2008-5914](https://cve.now/CVE-2008-5914.md): An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current (no CVSS) - [CVE-2008-5915](https://cve.now/CVE-2008-5915.md): An unspecified function in the JavaScript implementation in Google Chrome creates and exposes a "temporary footprint" when there is a curren (no CVSS) - [CVE-2009-0178](https://cve.now/CVE-2009-0178.md): Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors. (no CVSS) - [CVE-2009-0179](https://cve.now/CVE-2009-0179.md): libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service ( (no CVSS) - [CVE-2009-0180](https://cve.now/CVE-2009-0180.md): Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, w (no CVSS) - [CVE-2009-0181](https://cve.now/CVE-2009-0181.md): Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed ent (no CVSS) - [CVE-2009-0182](https://cve.now/CVE-2009-0182.md): Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pl (no CVSS) - [CVE-2008-5911](https://cve.now/CVE-2008-5911.md): Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attack (no CVSS) - [CVE-2009-0174](https://cve.now/CVE-2009-0174.md): Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of (no CVSS) - [CVE-2009-0175](https://cve.now/CVE-2009-0175.md): Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (application crash) a (no CVSS) - [CVE-2009-0176](https://cve.now/CVE-2009-0176.md): Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (no CVSS) - [CVE-2009-0177](https://cve.now/CVE-2009-0177.md): vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMw (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-01-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.