# CVEs published 2010-07-29

5 CVEs were published on July 29, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1777](https://cve.now/CVE-2010-1777.md): Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application cra (no CVSS)
- [CVE-2010-2528](https://cve.now/CVE-2010-2528.md): The clientautoresp function in family\_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated us (no CVSS)
- [CVE-2010-2754](https://cve.now/CVE-2010-2754.md): dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before (no CVSS)
- [CVE-2010-2755](https://cve.now/CVE-2010-2755.md): layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which a (no CVSS)
- [CVE-2010-2913](https://cve.now/CVE-2010-2913.md): The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information vi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.