# CVEs published 2009-11-10 29 CVEs were published on November 10, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-2808](https://cve.now/CVE-2009-2808.md): Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows ma (no CVSS) - [CVE-2009-2810](https://cve.now/CVE-2009-2810.md): Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which al (no CVSS) - [CVE-2009-2818](https://cve.now/CVE-2009-2818.md): Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier fo (no CVSS) - [CVE-2009-2819](https://cve.now/CVE-2009-2819.md): AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2009-2820](https://cve.now/CVE-2009-2820.md): The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP heade (no CVSS) - [CVE-2009-2823](https://cve.now/CVE-2009-2823.md): The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site sc (no CVSS) - [CVE-2009-2824](https://cve.now/CVE-2009-2824.md): Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a craft (no CVSS) - [CVE-2009-2825](https://cve.now/CVE-2009-2825.md): Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\\0' character in a domain name in the subject's Common Nam (no CVSS) - [CVE-2009-2826](https://cve.now/CVE-2009-2826.md): Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of se (no CVSS) - [CVE-2009-2827](https://cve.now/CVE-2009-2827.md): Heap-based buffer overflow in Disk Images in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause (no CVSS) - [CVE-2009-2828](https://cve.now/CVE-2009-2828.md): The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memo (no CVSS) - [CVE-2009-2829](https://cve.now/CVE-2009-2829.md): Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attac (no CVSS) - [CVE-2009-2830](https://cve.now/CVE-2009-2830.md): Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to (no CVSS) - [CVE-2009-2831](https://cve.now/CVE-2009-2831.md): Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, (no CVSS) - [CVE-2009-2832](https://cve.now/CVE-2009-2832.md): Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2009-2833](https://cve.now/CVE-2009-2833.md): Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent at (no CVSS) - [CVE-2009-2834](https://cve.now/CVE-2009-2834.md): IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vecto (no CVSS) - [CVE-2009-2835](https://cve.now/CVE-2009-2835.md): The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause (no CVSS) - [CVE-2009-2836](https://cve.now/CVE-2009-2836.md): Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to b (no CVSS) - [CVE-2009-2837](https://cve.now/CVE-2009-2837.md): Heap-based buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2009-2838](https://cve.now/CVE-2009-2838.md): Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (appli (no CVSS) - [CVE-2009-2839](https://cve.now/CVE-2009-2839.md): Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS) - [CVE-2009-2840](https://cve.now/CVE-2009-2840.md): Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the co (no CVSS) - [CVE-2009-3930](https://cve.now/CVE-2009-3930.md): Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malf (no CVSS) - [CVE-2009-3727](https://cve.now/CVE-2009-3727.md): Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x (no CVSS) - [CVE-2009-3618](https://cve.now/CVE-2009-3618.md): Cross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 allows remote attackers to inject arbi (no CVSS) - [CVE-2009-3619](https://cve.now/CVE-2009-3619.md): Unspecified vulnerability in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 has unknown impact and remote attack vectors related to "printing (no CVSS) - [CVE-2009-3924](https://cve.now/CVE-2009-3924.md): Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier (no CVSS) - [CVE-2009-3923](https://cve.now/CVE-2009-3923.md): The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows re (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-11-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.