# CVEs published 2010-08-11

46 CVEs were published on August 11, 2010: 0 critical, 4 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-2990](https://cve.now/CVE-2010-2990.md): Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Ci (no CVSS)
- [CVE-2010-2991](https://cve.now/CVE-2010-2991.md): The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO) component in Citrix Online Plug-in for Windows (no CVSS)
- [CVE-2010-0019](https://cve.now/CVE-2010-0019.md): Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows r (no CVSS)
- [CVE-2010-0209](https://cve.now/CVE-2010-0209.md): Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or caus (no CVSS)
- [CVE-2010-1258](https://cve.now/CVE-2010-1258.md): Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute scri (no CVSS)
- [CVE-2010-1882](https://cve.now/CVE-2010-1882.md): Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Se (no CVSS)
- [CVE-2010-1887](https://cve.now/CVE-2010-1887.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windo (no CVSS)
- [CVE-2010-1888](https://cve.now/CVE-2010-1888.md): Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "W (no CVSS)
- [CVE-2010-1889](https://cve.now/CVE-2010-1889.md): Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to (CVSS 7.8)
- [CVE-2010-1890](https://cve.now/CVE-2010-1890.md): The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on k (no CVSS)
- [CVE-2010-1892](https://cve.now/CVE-2010-1892.md): The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malfo (no CVSS)
- [CVE-2010-1893](https://cve.now/CVE-2010-1893.md): Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to ga (no CVSS)
- [CVE-2010-1894](https://cve.now/CVE-2010-1894.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspe (no CVSS)
- [CVE-2010-1895](https://cve.now/CVE-2010-1895.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memo (no CVSS)
- [CVE-2010-1896](https://cve.now/CVE-2010-1896.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and W (CVSS 8.4)
- [CVE-2010-1897](https://cve.now/CVE-2010-1897.md): The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windo (no CVSS)
- [CVE-2010-1898](https://cve.now/CVE-2010-1898.md): The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 b (no CVSS)
- [CVE-2010-1900](https://cve.now/CVE-2010-1900.md): Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi (no CVSS)
- [CVE-2010-1901](https://cve.now/CVE-2010-1901.md): Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi (no CVSS)
- [CVE-2010-1902](https://cve.now/CVE-2010-1902.md): Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Conv (no CVSS)
- [CVE-2010-1903](https://cve.now/CVE-2010-1903.md): Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2010-2213](https://cve.now/CVE-2010-2213.md): Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or caus (no CVSS)
- [CVE-2010-2214](https://cve.now/CVE-2010-2214.md): Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or caus (no CVSS)
- [CVE-2010-2215](https://cve.now/CVE-2010-2215.md): Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selectin (no CVSS)
- [CVE-2010-2216](https://cve.now/CVE-2010-2216.md): Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or caus (no CVSS)
- [CVE-2010-2217](https://cve.now/CVE-2010-2217.md): Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, rel (no CVSS)
- [CVE-2010-2218](https://cve.now/CVE-2010-2218.md): Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, (no CVSS)
- [CVE-2010-2219](https://cve.now/CVE-2010-2219.md): Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of serv (no CVSS)
- [CVE-2010-2220](https://cve.now/CVE-2010-2220.md): Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, (no CVSS)
- [CVE-2010-2542](https://cve.now/CVE-2010-2542.md): Stack-based buffer overflow in the is\_git\_directory function in setup.c in Git before 1.7.2.1 allows local users to gain privileges via a lo (no CVSS)
- [CVE-2010-2550](https://cve.now/CVE-2010-2550.md): The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R (no CVSS)
- [CVE-2010-2551](https://cve.now/CVE-2010-2551.md): The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an in (no CVSS)
- [CVE-2010-2552](https://cve.now/CVE-2010-2552.md): Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows (no CVSS)
- [CVE-2010-2553](https://cve.now/CVE-2010-2553.md): The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decompress media files, wh (no CVSS)
- [CVE-2010-2554](https://cve.now/CVE-2010-2554.md): The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect (CVSS 7.8)
- [CVE-2010-2555](https://cve.now/CVE-2010-2555.md): The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not prope (no CVSS)
- [CVE-2010-2556](https://cve.now/CVE-2010-2556.md): Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2010-2557](https://cve.now/CVE-2010-2557.md): Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2010-2558](https://cve.now/CVE-2010-2558.md): Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS)
- [CVE-2010-2559](https://cve.now/CVE-2010-2559.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2010-2560](https://cve.now/CVE-2010-2560.md): Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2010-2561](https://cve.now/CVE-2010-2561.md): Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2010-2562](https://cve.now/CVE-2010-2562.md): Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse (no CVSS)
- [CVE-2010-2564](https://cve.now/CVE-2010-2564.md): Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2010-2566](https://cve.now/CVE-2010-2566.md): The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly valid (no CVSS)
- [CVE-2010-2861](https://cve.now/CVE-2010-2861.md): Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to re (CVSS 7.5, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-08-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.