# CVEs published 2009-12-18

14 CVEs were published on December 18, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2280](https://cve.now/CVE-2007-2280.md): Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenV (no CVSS)
- [CVE-2007-2281](https://cve.now/CVE-2007-2281.md): Integer overflow in the \_ncp32.\_NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manag (no CVSS)
- [CVE-2009-2875](https://cve.now/CVE-2009-2875.md): Buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 2 (no CVSS)
- [CVE-2009-2876](https://cve.now/CVE-2009-2876.md): Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10 (no CVSS)
- [CVE-2009-2877](https://cve.now/CVE-2009-2877.md): Stack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x (aka T27SP10) (no CVSS)
- [CVE-2009-2878](https://cve.now/CVE-2009-2878.md): Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10 (no CVSS)
- [CVE-2009-2879](https://cve.now/CVE-2009-2879.md): Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10 (no CVSS)
- [CVE-2009-2880](https://cve.now/CVE-2009-2880.md): Buffer overflow in atrpui.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 2 (no CVSS)
- [CVE-2009-3703](https://cve.now/CVE-2009-3703.md): Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2009-3996](https://cve.now/CVE-2009-3996.md): Heap-based buffer overflow in IN\_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote at (no CVSS)
- [CVE-2009-4356](https://cve.now/CVE-2009-4356.md): Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via ma (no CVSS)
- [CVE-2009-4357](https://cve.now/CVE-2009-4357.md): CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which (no CVSS)
- [CVE-2009-3995](https://cve.now/CVE-2009-3995.md): Multiple heap-based buffer overflows in IN\_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow (no CVSS)
- [CVE-2009-3997](https://cve.now/CVE-2009-3997.md): Integer overflow in IN\_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.