# CVEs published 2010-02-10

36 CVEs were published on February 10, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0016](https://cve.now/CVE-2010-0016.md): The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, (no CVSS)
- [CVE-2010-0017](https://cve.now/CVE-2010-0017.md): Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-m (no CVSS)
- [CVE-2010-0020](https://cve.now/CVE-2010-0020.md): The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G (no CVSS)
- [CVE-2010-0021](https://cve.now/CVE-2010-0021.md): Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 (CVSS 5.9)
- [CVE-2010-0022](https://cve.now/CVE-2010-0022.md): The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G (no CVSS)
- [CVE-2010-0023](https://cve.now/CVE-2010-0023.md): The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill proce (no CVSS)
- [CVE-2010-0026](https://cve.now/CVE-2010-0026.md): The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a de (no CVSS)
- [CVE-2010-0028](https://cve.now/CVE-2010-0028.md): Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2010-0029](https://cve.now/CVE-2010-0029.md): Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, (no CVSS)
- [CVE-2010-0030](https://cve.now/CVE-2010-0030.md): Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a craf (no CVSS)
- [CVE-2010-0031](https://cve.now/CVE-2010-0031.md): Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to ex (no CVSS)
- [CVE-2010-0032](https://cve.now/CVE-2010-0032.md): Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a cr (no CVSS)
- [CVE-2010-0033](https://cve.now/CVE-2010-0033.md): Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoi (no CVSS)
- [CVE-2010-0034](https://cve.now/CVE-2010-0034.md): Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoi (no CVSS)
- [CVE-2010-0035](https://cve.now/CVE-2010-0035.md): The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust rel (no CVSS)
- [CVE-2010-0231](https://cve.now/CVE-2010-0231.md): The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G (no CVSS)
- [CVE-2010-0233](https://cve.now/CVE-2010-0233.md): Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server (no CVSS)
- [CVE-2010-0239](https://cve.now/CVE-2010-0239.md): The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properl (no CVSS)
- [CVE-2010-0240](https://cve.now/CVE-2010-0240.md): The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, (no CVSS)
- [CVE-2010-0241](https://cve.now/CVE-2010-0241.md): The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properl (no CVSS)
- [CVE-2010-0242](https://cve.now/CVE-2010-0242.md): The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a deni (no CVSS)
- [CVE-2010-0243](https://cve.now/CVE-2010-0243.md): Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2010-0250](https://cve.now/CVE-2010-0250.md): Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Wi (no CVSS)
- [CVE-2010-0252](https://cve.now/CVE-2010-0252.md): The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows (no CVSS)
- [CVE-2009-4631](https://cve.now/CVE-2009-4631.md): Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrar (no CVSS)
- [CVE-2009-4632](https://cve.now/CVE-2009-4632.md): oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive (no CVSS)
- [CVE-2009-4633](https://cve.now/CVE-2009-4633.md): vorbis\_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause (no CVSS)
- [CVE-2009-4634](https://cve.now/CVE-2009-4634.md): Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a craf (no CVSS)
- [CVE-2009-4635](https://cve.now/CVE-2009-4635.md): FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with imprope (no CVSS)
- [CVE-2009-4636](https://cve.now/CVE-2009-4636.md): FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop. (no CVSS)
- [CVE-2009-4637](https://cve.now/CVE-2009-4637.md): FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger (no CVSS)
- [CVE-2009-4638](https://cve.now/CVE-2009-4638.md): Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown (no CVSS)
- [CVE-2009-4639](https://cve.now/CVE-2009-4639.md): The av\_rescale\_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI (no CVSS)
- [CVE-2009-4640](https://cve.now/CVE-2009-4640.md): Array index error in vorbis\_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (no CVSS)
- [CVE-2010-0394](https://cve.now/CVE-2010-0394.md): PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, (no CVSS)
- [CVE-2010-0564](https://cve.now/CVE-2010-0564.md): Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.