# CVEs published 2009-06-10

66 CVEs were published on June 10, 2009: 0 critical, 5 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2009-2027](https://cve.now/CVE-2009-2027.md): The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate laun (no CVSS)
- [CVE-2009-0549](https://cve.now/CVE-2009-0549.md): Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac (no CVSS)
- [CVE-2009-0557](https://cve.now/CVE-2009-0557.md): Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System (CVSS 7.8, KEV)
- [CVE-2009-0558](https://cve.now/CVE-2009-0558.md): Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows (no CVSS)
- [CVE-2009-0559](https://cve.now/CVE-2009-0559.md): Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2009-0560](https://cve.now/CVE-2009-0560.md): Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System (no CVSS)
- [CVE-2009-0561](https://cve.now/CVE-2009-0561.md): Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Micr (no CVSS)
- [CVE-2009-1122](https://cve.now/CVE-2009-1122.md): The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows re (no CVSS)
- [CVE-2009-1123](https://cve.now/CVE-2009-1123.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly v (CVSS 7.8, KEV)
- [CVE-2009-1124](https://cve.now/CVE-2009-1124.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly v (no CVSS)
- [CVE-2009-1125](https://cve.now/CVE-2009-1125.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly v (no CVSS)
- [CVE-2009-1126](https://cve.now/CVE-2009-1126.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with (no CVSS)
- [CVE-2009-1134](https://cve.now/CVE-2009-1134.md): Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, a (no CVSS)
- [CVE-2009-1140](https://cve.now/CVE-2009-1140.md): Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2 (no CVSS)
- [CVE-2009-1141](https://cve.now/CVE-2009-1141.md): Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecifi (no CVSS)
- [CVE-2009-1528](https://cve.now/CVE-2009-1528.md): Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Serve (no CVSS)
- [CVE-2009-1529](https://cve.now/CVE-2009-1529.md): Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 d (CVSS 8.1)
- [CVE-2009-1530](https://cve.now/CVE-2009-1530.md): Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and (no CVSS)
- [CVE-2009-1531](https://cve.now/CVE-2009-1531.md): Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 a (no CVSS)
- [CVE-2009-1532](https://cve.now/CVE-2009-1532.md): Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 d (CVSS 8.8)
- [CVE-2009-0228](https://cve.now/CVE-2009-0228.md): Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 S (no CVSS)
- [CVE-2009-0229](https://cve.now/CVE-2009-0229.md): The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 a (no CVSS)
- [CVE-2009-0230](https://cve.now/CVE-2009-0230.md): The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allo (no CVSS)
- [CVE-2009-0239](https://cve.now/CVE-2009-0239.md): Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted (no CVSS)
- [CVE-2009-0563](https://cve.now/CVE-2009-0563.md): Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open (CVSS 7.8, KEV)
- [CVE-2009-0565](https://cve.now/CVE-2009-0565.md): Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File For (no CVSS)
- [CVE-2009-0568](https://cve.now/CVE-2009-0568.md): The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 20 (no CVSS)
- [CVE-2009-1138](https://cve.now/CVE-2009-1138.md): The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows r (no CVSS)
- [CVE-2009-1139](https://cve.now/CVE-2009-1139.md): Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (no CVSS)
- [CVE-2009-1533](https://cve.now/CVE-2009-1533.md): Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, (no CVSS)
- [CVE-2009-1695](https://cve.now/CVE-2009-1695.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 (no CVSS)
- [CVE-2009-1696](https://cve.now/CVE-2009-1696.md): WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbe (no CVSS)
- [CVE-2009-1697](https://cve.now/CVE-2009-1697.md): CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2 (no CVSS)
- [CVE-2009-1698](https://cve.now/CVE-2009-1698.md): WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer (no CVSS)
- [CVE-2009-1699](https://cve.now/CVE-2009-1699.md): The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 throug (no CVSS)
- [CVE-2009-1700](https://cve.now/CVE-2009-1700.md): The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 do (no CVSS)
- [CVE-2009-1701](https://cve.now/CVE-2009-1701.md): Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPh (no CVSS)
- [CVE-2009-1702](https://cve.now/CVE-2009-1702.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 (no CVSS)
- [CVE-2009-1703](https://cve.now/CVE-2009-1703.md): WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote att (no CVSS)
- [CVE-2009-1704](https://cve.now/CVE-2009-1704.md): CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows (no CVSS)
- [CVE-2009-1705](https://cve.now/CVE-2009-1705.md): CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows (no CVSS)
- [CVE-2009-1706](https://cve.now/CVE-2009-1706.md): The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified ci (no CVSS)
- [CVE-2009-1707](https://cve.now/CVE-2009-1707.md): Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site pass (no CVSS)
- [CVE-2009-1708](https://cve.now/CVE-2009-1708.md): Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbit (no CVSS)
- [CVE-2009-1709](https://cve.now/CVE-2009-1709.md): Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attacker (no CVSS)
- [CVE-2009-1710](https://cve.now/CVE-2009-1710.md): WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and (no CVSS)
- [CVE-2009-1711](https://cve.now/CVE-2009-1711.md): WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitra (no CVSS)
- [CVE-2009-1712](https://cve.now/CVE-2009-1712.md): WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2009-1713](https://cve.now/CVE-2009-1713.md): The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers (no CVSS)
- [CVE-2009-1714](https://cve.now/CVE-2009-1714.md): Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inje (no CVSS)
- [CVE-2009-1715](https://cve.now/CVE-2009-1715.md): Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inje (no CVSS)
- [CVE-2009-1716](https://cve.now/CVE-2009-1716.md): CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local user (no CVSS)
- [CVE-2009-1718](https://cve.now/CVE-2009-1718.md): WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events an (no CVSS)
- [CVE-2009-1535](https://cve.now/CVE-2009-1535.md): The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mec (no CVSS)
- [CVE-2009-1681](https://cve.now/CVE-2009-1681.md): WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites fr (no CVSS)
- [CVE-2009-1682](https://cve.now/CVE-2009-1682.md): Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attacker (no CVSS)
- [CVE-2009-1684](https://cve.now/CVE-2009-1684.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 (no CVSS)
- [CVE-2009-1685](https://cve.now/CVE-2009-1685.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 (no CVSS)
- [CVE-2009-1686](https://cve.now/CVE-2009-1686.md): WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle cons (no CVSS)
- [CVE-2009-1687](https://cve.now/CVE-2009-1687.md): The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through (no CVSS)
- [CVE-2009-1688](https://cve.now/CVE-2009-1688.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 (no CVSS)
- [CVE-2009-1689](https://cve.now/CVE-2009-1689.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 (no CVSS)
- [CVE-2009-1690](https://cve.now/CVE-2009-1690.md): Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 throug (no CVSS)
- [CVE-2009-1691](https://cve.now/CVE-2009-1691.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 (no CVSS)
- [CVE-2009-1693](https://cve.now/CVE-2009-1693.md): WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to re (no CVSS)
- [CVE-2009-1694](https://cve.now/CVE-2009-1694.md): WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.