# CVEs published 2010-06-08

36 CVEs were published on June 8, 2010: 0 critical, 3 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-0484](https://cve.now/CVE-2010-0484.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server (no CVSS)
- [CVE-2010-0485](https://cve.now/CVE-2010-0485.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 (CVSS 7.8)
- [CVE-2010-0811](https://cve.now/CVE-2010-0811.md): Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Win (no CVSS)
- [CVE-2010-1255](https://cve.now/CVE-2010-1255.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 (no CVSS)
- [CVE-2010-1259](https://cve.now/CVE-2010-1259.md): Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was no (no CVSS)
- [CVE-2010-1260](https://cve.now/CVE-2010-1260.md): The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code (CVSS 7.5)
- [CVE-2010-1261](https://cve.now/CVE-2010-1261.md): The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code (no CVSS)
- [CVE-2010-1262](https://cve.now/CVE-2010-1262.md): Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was no (no CVSS)
- [CVE-2010-1879](https://cve.now/CVE-2010-1879.md): Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll C (no CVSS)
- [CVE-2010-1880](https://cve.now/CVE-2010-1880.md): Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server (no CVSS)
- [CVE-2010-0819](https://cve.now/CVE-2010-0819.md): Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 200 (no CVSS)
- [CVE-2010-0821](https://cve.now/CVE-2010-0821.md): Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML (no CVSS)
- [CVE-2010-0822](https://cve.now/CVE-2010-0822.md): Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter (no CVSS)
- [CVE-2010-0823](https://cve.now/CVE-2010-0823.md): Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML (no CVSS)
- [CVE-2010-0824](https://cve.now/CVE-2010-0824.md): Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2010-1245](https://cve.now/CVE-2010-1245.md): Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter f (no CVSS)
- [CVE-2010-1246](https://cve.now/CVE-2010-1246.md): Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a ma (no CVSS)
- [CVE-2010-1247](https://cve.now/CVE-2010-1247.md): Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malf (no CVSS)
- [CVE-2010-1248](https://cve.now/CVE-2010-1248.md): Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel fi (no CVSS)
- [CVE-2010-1249](https://cve.now/CVE-2010-1249.md): Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac all (no CVSS)
- [CVE-2010-1250](https://cve.now/CVE-2010-1250.md): Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter (no CVSS)
- [CVE-2010-1251](https://cve.now/CVE-2010-1251.md): Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2010-1252](https://cve.now/CVE-2010-1252.md): Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2010-1253](https://cve.now/CVE-2010-1253.md): Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Of (no CVSS)
- [CVE-2010-1254](https://cve.now/CVE-2010-1254.md): The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local us (no CVSS)
- [CVE-2010-1256](https://cve.now/CVE-2010-1256.md): Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenti (no CVSS)
- [CVE-2010-1257](https://cve.now/CVE-2010-1257.md): Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Off (no CVSS)
- [CVE-2010-1263](https://cve.now/CVE-2010-1263.md): Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, (no CVSS)
- [CVE-2010-1264](https://cve.now/CVE-2010-1264.md): Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (han (no CVSS)
- [CVE-2004-2768](https://cve.now/CVE-2004-2768.md): dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local user (no CVSS)
- [CVE-2005-4889](https://cve.now/CVE-2005-4889.md): lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package remov (no CVSS)
- [CVE-2010-1297](https://cve.now/CVE-2010-1297.md): Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, (CVSS 7.8, KEV)
- [CVE-2010-2059](https://cve.now/CVE-2010-2059.md): lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable (no CVSS)
- [CVE-2010-2197](https://cve.now/CVE-2010-2197.md): rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove ho (no CVSS)
- [CVE-2010-2198](https://cve.now/CVE-2010-2198.md): lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM packa (no CVSS)
- [CVE-2010-2199](https://cve.now/CVE-2010-2199.md): lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM packa (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.