# CVEs published 2010-08-17

17 CVEs were published on August 17, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1516](https://cve.now/CVE-2010-1516.md): Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via (1) a crafted PNG file, related to the get (no CVSS)
- [CVE-2010-2812](https://cve.now/CVE-2010-2812.md): Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service (exception and daemon crash) via a PING command that lacks an a (no CVSS)
- [CVE-2010-2934](https://cve.now/CVE-2010-2934.md): Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service (exception and daemon crash) via unkno (no CVSS)
- [CVE-2009-3737](https://cve.now/CVE-2009-3737.md): The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows (no CVSS)
- [CVE-2010-0126](https://cve.now/CVE-2010-0126.md): Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other product (no CVSS)
- [CVE-2010-0131](https://cve.now/CVE-2010-0131.md): Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Securi (no CVSS)
- [CVE-2010-0133](https://cve.now/CVE-2010-0133.md): Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple (no CVSS)
- [CVE-2010-0134](https://cve.now/CVE-2010-0134.md): Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remot (no CVSS)
- [CVE-2010-0135](https://cve.now/CVE-2010-0135.md): Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, (no CVSS)
- [CVE-2010-1524](https://cve.now/CVE-2010-1524.md): The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow (no CVSS)
- [CVE-2010-1525](https://cve.now/CVE-2010-1525.md): Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and (no CVSS)
- [CVE-2010-1870](https://cve.now/CVE-2010-1870.md): The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and po (no CVSS, org.apache.struts:struts2-core)
- [CVE-2010-2241](https://cve.now/CVE-2010-2241.md): The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when cr (no CVSS)
- [CVE-2010-2939](https://cve.now/CVE-2010-2939.md): Double free vulnerability in the ssl3\_get\_key\_exchange function in the OpenSSL client (ssl/s3\_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and p (no CVSS)
- [CVE-2010-3030](https://cve.now/CVE-2010-3030.md): Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the (no CVSS)
- [CVE-2010-3031](https://cve.now/CVE-2010-3031.md): Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2010-3032](https://cve.now/CVE-2010-3032.md): Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-08-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.