# CVEs published 2009-06-02

16 CVEs were published on June 2, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0185](https://cve.now/CVE-2009-0185.md): Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS)
- [CVE-2009-0188](https://cve.now/CVE-2009-0188.md): Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2009-0893](https://cve.now/CVE-2009-0893.md): Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player (no CVSS)
- [CVE-2009-0894](https://cve.now/CVE-2009-0894.md): Heap-based buffer overflow in the decoder\_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2 (no CVSS)
- [CVE-2009-0950](https://cve.now/CVE-2009-0950.md): Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (appli (no CVSS)
- [CVE-2009-0951](https://cve.now/CVE-2009-0951.md): Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS)
- [CVE-2009-0952](https://cve.now/CVE-2009-0952.md): Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application (no CVSS)
- [CVE-2009-0953](https://cve.now/CVE-2009-0953.md): Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS)
- [CVE-2009-0954](https://cve.now/CVE-2009-0954.md): Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2009-0955](https://cve.now/CVE-2009-0955.md): Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted (no CVSS)
- [CVE-2009-0956](https://cve.now/CVE-2009-0956.md): Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execut (no CVSS)
- [CVE-2009-0957](https://cve.now/CVE-2009-0957.md): Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS)
- [CVE-2009-1880](https://cve.now/CVE-2009-1880.md): Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vec (no CVSS)
- [CVE-2009-1881](https://cve.now/CVE-2009-1881.md): Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vec (no CVSS)
- [CVE-2009-1882](https://cve.now/CVE-2009-1882.md): Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause (no CVSS)
- [CVE-2004-2764](https://cve.now/CVE-2004-2764.md): Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2\_04, 1.4.1 through 1.4.1\_07, and 1.4.0 through 1.4.0\_04 allows untrusted apple (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.