# CVEs published 2010-01-29

8 CVEs were published on January 29, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2624](https://cve.now/CVE-2009-2624.md): The huft\_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attack (no CVSS)
- [CVE-2009-4629](https://cve.now/CVE-2009-4629.md): Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APP\_TYPE\_ (no CVSS)
- [CVE-2009-4630](https://cve.now/CVE-2009-4630.md): Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within loc (no CVSS)
- [CVE-2010-0001](https://cve.now/CVE-2010-0001.md): Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows (no CVSS)
- [CVE-2010-0004](https://cve.now/CVE-2010-0004.md): ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discove (no CVSS)
- [CVE-2010-0005](https://cve.now/CVE-2010-0005.md): query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, whi (no CVSS)
- [CVE-2010-0463](https://cve.now/CVE-2010-0463.md): Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which (no CVSS)
- [CVE-2010-0464](https://cve.now/CVE-2010-0464.md): Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.