# CVEs published 2009-10-14 29 CVEs were published on October 14, 2009: 0 critical, 4 high. Days are UTC. - [CVE-2009-0090](https://cve.now/CVE-2009-0090.md): Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obt (no CVSS) - [CVE-2009-0091](https://cve.now/CVE-2009-0091.md): Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which a (no CVSS) - [CVE-2009-0555](https://cve.now/CVE-2009-0555.md): Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (AC (no CVSS) - [CVE-2009-1547](https://cve.now/CVE-2009-1547.md): Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a c (CVSS 8.8) - [CVE-2009-2497](https://cve.now/CVE-2009-2497.md): The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly (no CVSS) - [CVE-2009-2500](https://cve.now/CVE-2009-2500.md): Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office (no CVSS) - [CVE-2009-2501](https://cve.now/CVE-2009-2501.md): Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Micros (no CVSS) - [CVE-2009-2502](https://cve.now/CVE-2009-2502.md): Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office (CVSS 8.1) - [CVE-2009-2503](https://cve.now/CVE-2009-2503.md): GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft O (no CVSS) - [CVE-2009-2504](https://cve.now/CVE-2009-2504.md): Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 a (no CVSS) - [CVE-2009-2507](https://cve.now/CVE-2009-2507.md): A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly proce (no CVSS) - [CVE-2009-2510](https://cve.now/CVE-2009-2510.md): The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Wi (no CVSS) - [CVE-2009-2511](https://cve.now/CVE-2009-2511.md): Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Go (no CVSS) - [CVE-2009-2515](https://cve.now/CVE-2009-2515.md): Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Go (no CVSS) - [CVE-2009-2516](https://cve.now/CVE-2009-2516.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly valida (CVSS 7.1) - [CVE-2009-2517](https://cve.now/CVE-2009-2517.md): The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows (no CVSS) - [CVE-2009-2518](https://cve.now/CVE-2009-2518.md): Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap ( (no CVSS) - [CVE-2009-2524](https://cve.now/CVE-2009-2524.md): Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 a (no CVSS) - [CVE-2009-2525](https://cve.now/CVE-2009-2525.md): Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (AC (no CVSS) - [CVE-2009-2526](https://cve.now/CVE-2009-2526.md): Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remot (no CVSS) - [CVE-2009-2527](https://cve.now/CVE-2009-2527.md): Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF fil (no CVSS) - [CVE-2009-2528](https://cve.now/CVE-2009-2528.md): GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to e (no CVSS) - [CVE-2009-2529](https://cve.now/CVE-2009-2529.md): Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allow (CVSS 8.1) - [CVE-2009-2530](https://cve.now/CVE-2009-2530.md): Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar (no CVSS) - [CVE-2009-2531](https://cve.now/CVE-2009-2531.md): Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar (no CVSS) - [CVE-2009-2532](https://cve.now/CVE-2009-2532.md): Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in (no CVSS) - [CVE-2009-2999](https://cve.now/CVE-2009-2999.md): The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application restart and network dis (no CVSS) - [CVE-2009-3126](https://cve.now/CVE-2009-3126.md): Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office (no CVSS) - [CVE-2009-3698](https://cve.now/CVE-2009-3698.md): An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service (system process re (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-10-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.