# CVEs published 2010-11-10

15 CVEs were published on November 10, 2010: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2010-2572](https://cve.now/CVE-2010-2572.md): Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 (CVSS 7.8, KEV)
- [CVE-2010-2573](https://cve.now/CVE-2010-2573.md): Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to e (no CVSS)
- [CVE-2010-2732](https://cve.now/CVE-2010-2732.md): Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Upda (no CVSS)
- [CVE-2010-2733](https://cve.now/CVE-2010-2733.md): Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, an (no CVSS)
- [CVE-2010-2734](https://cve.now/CVE-2010-2734.md): Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, (no CVSS)
- [CVE-2010-3333](https://cve.now/CVE-2010-3333.md): Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office (CVSS 7.8, KEV)
- [CVE-2010-3334](https://cve.now/CVE-2010-3334.md): Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File (no CVSS)
- [CVE-2010-3335](https://cve.now/CVE-2010-3335.md): Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File (no CVSS)
- [CVE-2010-3336](https://cve.now/CVE-2010-3336.md): Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attacker (no CVSS)
- [CVE-2010-3337](https://cve.now/CVE-2010-3337.md): Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in th (no CVSS)
- [CVE-2010-3633](https://cve.now/CVE-2010-3633.md): Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a den (no CVSS)
- [CVE-2010-3634](https://cve.now/CVE-2010-3634.md): Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0 (no CVSS)
- [CVE-2010-3635](https://cve.now/CVE-2010-3635.md): Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via (no CVSS)
- [CVE-2010-3936](https://cve.now/CVE-2010-3936.md): Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 20 (no CVSS)
- [CVE-2010-4156](https://cve.now/CVE-2010-4156.md): The mb\_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-11-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.