# CVEs published 2009-03-10

19 CVEs were published on March 10, 2009: 0 critical, 1 high. Days are UTC.

- [CVE-2008-3547](https://cve.now/CVE-2008-3547.md): Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game d (no CVSS)
- [CVE-2009-0081](https://cve.now/CVE-2009-0081.md): The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vis (no CVSS)
- [CVE-2009-0082](https://cve.now/CVE-2009-0082.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly val (CVSS 7.8)
- [CVE-2009-0083](https://cve.now/CVE-2009-0083.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local (no CVSS)
- [CVE-2009-0085](https://cve.now/CVE-2009-0085.md): The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gol (no CVSS)
- [CVE-2009-0191](https://cve.now/CVE-2009-0191.md): Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary se (no CVSS)
- [CVE-2009-0836](https://cve.now/CVE-2009-0836.md): Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing (no CVSS)
- [CVE-2009-0837](https://cve.now/CVE-2009-0837.md): Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2009-0869](https://cve.now/CVE-2009-0869.md): Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through (no CVSS)
- [CVE-2009-0870](https://cve.now/CVE-2009-0870.md): The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv\_111, allow local users to cause a denial of service (inf (no CVSS)
- [CVE-2009-0860](https://cve.now/CVE-2009-0860.md): Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attack (no CVSS)
- [CVE-2009-0861](https://cve.now/CVE-2009-0861.md): Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC (no CVSS)
- [CVE-2009-0862](https://cve.now/CVE-2009-0862.md): Cross-site scripting (XSS) vulnerability in the hook\_cntrlr\_error\_output function in modules/page/hooks/listeners.php in the admincp compone (no CVSS)
- [CVE-2009-0863](https://cve.now/CVE-2009-0863.md): SQL injection vulnerability in admin/delete\_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2009-0864](https://cve.now/CVE-2009-0864.md): S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie. (no CVSS)
- [CVE-2009-0865](https://cve.now/CVE-2009-0865.md): Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX\_v8200) ActiveX control 8.1.2 and 8.2.0 in L (no CVSS)
- [CVE-2009-0866](https://cve.now/CVE-2009-0866.md): pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a (no CVSS)
- [CVE-2009-0867](https://cve.now/CVE-2009-0867.md): The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and (2) software informa (no CVSS)
- [CVE-2009-0868](https://cve.now/CVE-2009-0868.md): CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary H (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.