# CVEs published 2010-03-31 28 CVEs were published on March 31, 2010: 0 critical, 1 high. Days are UTC. - [CVE-2010-0267](https://cve.now/CVE-2010-0267.md): Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary c (no CVSS) - [CVE-2010-0488](https://cve.now/CVE-2010-0488.md): Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers (CVSS 6.5) - [CVE-2010-0489](https://cve.now/CVE-2010-0489.md): Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML (no CVSS) - [CVE-2010-0490](https://cve.now/CVE-2010-0490.md): Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar (no CVSS) - [CVE-2010-0491](https://cve.now/CVE-2010-0491.md): Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by chan (no CVSS) - [CVE-2010-0492](https://cve.now/CVE-2010-0492.md): Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors re (CVSS 8.1) - [CVE-2010-0494](https://cve.now/CVE-2010-0494.md): Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin (no CVSS) - [CVE-2010-0805](https://cve.now/CVE-2010-0805.md): The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote (no CVSS) - [CVE-2010-0807](https://cve.now/CVE-2010-0807.md): Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS) - [CVE-2010-0527](https://cve.now/CVE-2010-0527.md): Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service ( (no CVSS) - [CVE-2010-0528](https://cve.now/CVE-2010-0528.md): Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption an (no CVSS) - [CVE-2010-0529](https://cve.now/CVE-2010-0529.md): Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or (no CVSS) - [CVE-2010-0531](https://cve.now/CVE-2010-0531.md): Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file. (no CVSS) - [CVE-2010-0532](https://cve.now/CVE-2010-0532.md): Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspe (no CVSS) - [CVE-2010-0536](https://cve.now/CVE-2010-0536.md): Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption an (no CVSS) - [CVE-2010-0132](https://cve.now/CVE-2010-0132.md): Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality (no CVSS) - [CVE-2010-0448](https://cve.now/CVE-2010-0448.md): Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via un (no CVSS) - [CVE-2010-0449](https://cve.now/CVE-2010-0449.md): Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2010-0450](https://cve.now/CVE-2010-0450.md): Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vecto (no CVSS) - [CVE-2010-1030](https://cve.now/CVE-2010-1030.md): Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to cause a denial of service via unknown vector (no CVSS) - [CVE-2010-1187](https://cve.now/CVE-2010-1187.md): The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, all (no CVSS) - [CVE-2010-1188](https://cve.now/CVE-2010-1188.md): Use-after-free vulnerability in net/ipv4/tcp\_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6\_RECVPKTINFO is set on a listening sock (no CVSS) - [CVE-2010-1189](https://cve.now/CVE-2010-1189.md): MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obt (no CVSS) - [CVE-2010-1190](https://cve.now/CVE-2010-1190.md): thumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as img\_auth.php, does not check user permissions bef (no CVSS) - [CVE-2010-1191](https://cve.now/CVE-2010-1191.md): Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended access restrictions and d (no CVSS) - [CVE-2010-1192](https://cve.now/CVE-2010-1192.md): libESMTP, probably 1.0.4 and earlier, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of (no CVSS) - [CVE-2010-1194](https://cve.now/CVE-2010-1194.md): The match\_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if (no CVSS) - [CVE-2010-1195](https://cve.now/CVE-2010-1195.md): Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-03-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.