# CVEs published 2009-08-05

16 CVEs were published on August 5, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6897](https://cve.now/CVE-2008-6897.md): Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service (crash) and possib (no CVSS)
- [CVE-2008-6898](https://cve.now/CVE-2008-6898.md): Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause (no CVSS)
- [CVE-2008-6899](https://cve.now/CVE-2008-6899.md): Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code (no CVSS)
- [CVE-2009-2579](https://cve.now/CVE-2009-2579.md): SQL injection vulnerability in reward\_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users t (no CVSS)
- [CVE-2009-2667](https://cve.now/CVE-2009-2667.md): Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager (TKLM) 1.0 has unknown impact and attack vectors, related to a "password secur (no CVSS)
- [CVE-2009-2668](https://cve.now/CVE-2009-2668.md): Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU c (no CVSS)
- [CVE-2009-2669](https://cve.now/CVE-2009-2669.md): A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) \_LIB\_INIT\_DBG and (2) \_LIB\_INIT\_DBG\_FILE environment v (no CVSS)
- [CVE-2009-2670](https://cve.now/CVE-2009-2670.md): The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not pre (no CVSS)
- [CVE-2009-2671](https://cve.now/CVE-2009-2671.md): The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20 (no CVSS)
- [CVE-2009-2672](https://cve.now/CVE-2009-2672.md): The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Updat (no CVSS)
- [CVE-2009-2673](https://cve.now/CVE-2009-2673.md): The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Updat (no CVSS)
- [CVE-2009-2674](https://cve.now/CVE-2009-2674.md): Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context- (no CVSS)
- [CVE-2009-2675](https://cve.now/CVE-2009-2675.md): Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 befor (no CVSS)
- [CVE-2009-2676](https://cve.now/CVE-2009-2676.md): Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE (no CVSS)
- [CVE-2009-2687](https://cve.now/CVE-2009-2687.md): The exif\_read\_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malfo (no CVSS)
- [CVE-2009-2688](https://cve.now/CVE-2009-2688.md): Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of servic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.