# CVEs published 2010-03-03

22 CVEs were published on March 3, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4656](https://cve.now/CVE-2009-4656.md): Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attack (no CVSS)
- [CVE-2009-4657](https://cve.now/CVE-2009-4657.md): The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by co (no CVSS)
- [CVE-2009-4658](https://cve.now/CVE-2009-4658.md): Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port assignment in the manag (no CVSS)
- [CVE-2009-4659](https://cve.now/CVE-2009-4659.md): Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows user-assisted remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2009-4660](https://cve.now/CVE-2009-4660.md): Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2009-4661](https://cve.now/CVE-2009-4661.md): Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2009-4662](https://cve.now/CVE-2009-4662.md): Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows re (no CVSS)
- [CVE-2009-4663](https://cve.now/CVE-2009-4663.md): Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long a (no CVSS)
- [CVE-2009-4664](https://cve.now/CVE-2009-4664.md): Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via a symlink attack on an unspecifie (no CVSS)
- [CVE-2010-0156](https://cve.now/CVE-2010-0156.md): Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/da (no CVSS, puppet)
- [CVE-2010-0205](https://cve.now/CVE-2010-0205.md): The png\_decompress\_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly (no CVSS)
- [CVE-2010-0483](https://cve.now/CVE-2010-0483.md): vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer i (no CVSS)
- [CVE-2010-0766](https://cve.now/CVE-2010-0766.md): Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2010-0917](https://cve.now/CVE-2010-0917.md): Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, (no CVSS)
- [CVE-2010-0918](https://cve.now/CVE-2010-0918.md): Multiple unspecified vulnerabilities in the UltraLite functionality in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Do (no CVSS)
- [CVE-2010-0919](https://cve.now/CVE-2010-0919.md): Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 befor (no CVSS)
- [CVE-2010-0920](https://cve.now/CVE-2010-0920.md): Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remot (no CVSS)
- [CVE-2010-0921](https://cve.now/CVE-2010-0921.md): Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allow (no CVSS)
- [CVE-2010-0922](https://cve.now/CVE-2010-0922.md): Unspecified vulnerability in secldapclntd in IBM AIX 5.3 with SP 5300-11-02 allows attackers to cause a denial of service (LDAP login failur (no CVSS)
- [CVE-2010-0923](https://cve.now/CVE-2010-0923.md): Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attack (no CVSS)
- [CVE-2010-0924](https://cve.now/CVE-2010-0924.md): cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to (no CVSS)
- [CVE-2010-0925](https://cve.now/CVE-2010-0925.md): cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.4 on Windows, allows remote attackers to cause a d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.