# CVEs published 2009-07-22

22 CVEs were published on July 22, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2462](https://cve.now/CVE-2009-2462.md): The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption (no CVSS)
- [CVE-2009-2463](https://cve.now/CVE-2009-2463.md): Multiple integer overflows in the (1) PL\_Base64Decode and (2) PL\_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox (no CVSS)
- [CVE-2009-2464](https://cve.now/CVE-2009-2464.md): The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows r (no CVSS)
- [CVE-2009-2465](https://cve.now/CVE-2009-2465.md): Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) (no CVSS)
- [CVE-2009-2466](https://cve.now/CVE-2009-2466.md): The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corrupti (no CVSS)
- [CVE-2009-2467](https://cve.now/CVE-2009-2467.md): Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly exec (no CVSS)
- [CVE-2009-2468](https://cve.now/CVE-2009-2468.md): Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allo (no CVSS)
- [CVE-2009-2469](https://cve.now/CVE-2009-2469.md): Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an \_\_defineSetter\_\_ func (no CVSS)
- [CVE-2009-2471](https://cve.now/CVE-2009-2471.md): The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execut (no CVSS)
- [CVE-2009-2472](https://cve.now/CVE-2009-2472.md): Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attack (no CVSS)
- [CVE-2009-2575](https://cve.now/CVE-2009-2575.md): The Research In Motion (RIM) BlackBerry 8800 allows remote attackers to cause a denial of service (memory consumption and browser crash) via (no CVSS)
- [CVE-2009-2576](https://cve.now/CVE-2009-2576.md): Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (no CVSS)
- [CVE-2009-2577](https://cve.now/CVE-2009-2577.md): Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and application hang) via a long Un (no CVSS)
- [CVE-2009-2578](https://cve.now/CVE-2009-2578.md): Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argumen (no CVSS)
- [CVE-2009-2567](https://cve.now/CVE-2009-2567.md): SQL injection vulnerability in the Almond Classifieds (com\_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2009-2568](https://cve.now/CVE-2009-2568.md): Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary code via a long string (no CVSS)
- [CVE-2009-2569](https://cve.now/CVE-2009-2569.md): Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2009-2570](https://cve.now/CVE-2009-2570.md): Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows re (no CVSS)
- [CVE-2009-2571](https://cve.now/CVE-2009-2571.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2009-2572](https://cve.now/CVE-2009-2572.md): Cross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Dru (no CVSS)
- [CVE-2009-2573](https://cve.now/CVE-2009-2573.md): Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic\_quotes\_gpc is disabled, allow remote authenticated users to execu (no CVSS)
- [CVE-2009-2574](https://cve.now/CVE-2009-2574.md): index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.