# CVEs published 2010-11-20

26 CVEs were published on November 20, 2010: 0 critical, 1 high. Days are UTC.

- [CVE-2010-3432](https://cve.now/CVE-2010-3432.md): The sctp\_packet\_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data (no CVSS)
- [CVE-2010-3618](https://cve.now/CVE-2010-3618.md): PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" func (no CVSS)
- [CVE-2010-3803](https://cve.now/CVE-2010-3803.md): Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows (no CVSS)
- [CVE-2010-3804](https://cve.now/CVE-2010-3804.md): The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X (no CVSS)
- [CVE-2010-3805](https://cve.now/CVE-2010-3805.md): Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allow (no CVSS)
- [CVE-2010-3808](https://cve.now/CVE-2010-3808.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform (no CVSS)
- [CVE-2010-3809](https://cve.now/CVE-2010-3809.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform (no CVSS)
- [CVE-2010-3810](https://cve.now/CVE-2010-3810.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle t (no CVSS)
- [CVE-2010-3811](https://cve.now/CVE-2010-3811.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X (no CVSS)
- [CVE-2010-3812](https://cve.now/CVE-2010-3812.md): Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 (no CVSS)
- [CVE-2010-3813](https://cve.now/CVE-2010-3813.md): The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS (no CVSS)
- [CVE-2010-3816](https://cve.now/CVE-2010-3816.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X (no CVSS)
- [CVE-2010-3817](https://cve.now/CVE-2010-3817.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform (no CVSS)
- [CVE-2010-3818](https://cve.now/CVE-2010-3818.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X (no CVSS)
- [CVE-2010-3819](https://cve.now/CVE-2010-3819.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform (no CVSS)
- [CVE-2010-3820](https://cve.now/CVE-2010-3820.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized mem (no CVSS)
- [CVE-2010-3821](https://cve.now/CVE-2010-3821.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle t (no CVSS)
- [CVE-2010-3822](https://cve.now/CVE-2010-3822.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized (no CVSS)
- [CVE-2010-3823](https://cve.now/CVE-2010-3823.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X (no CVSS)
- [CVE-2010-3824](https://cve.now/CVE-2010-3824.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X (no CVSS)
- [CVE-2010-3826](https://cve.now/CVE-2010-3826.md): WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform (no CVSS)
- [CVE-2010-4165](https://cve.now/CVE-2010-4165.md): The do\_tcp\_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP\_MAXSEG (aka MSS) value (no CVSS)
- [CVE-2010-4169](https://cve.now/CVE-2010-4169.md): Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vect (no CVSS)
- [CVE-2010-3872](https://cve.now/CVE-2010-3872.md): Httpd: mod\_fcgid: stack-based buffer overflow in fcgid\_header\_bucket\_read() in modules/fcgid/fcgid\_bucket.c (CVSS 7.5, mod\_fcgid · Red Hat Enterprise Linux +1)
- [CVE-2010-4210](https://cve.now/CVE-2010-4210.md): The pfs\_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which a (no CVSS)
- [CVE-2010-4299](https://cve.now/CVE-2010-4299.md): Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.