# CVEs published 2010-12-16

52 CVEs were published on December 16, 2010: 0 critical, 2 high. Days are UTC.

- [CVE-2009-5032](https://cve.now/CVE-2009-5032.md): The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploadin (no CVSS)
- [CVE-2009-5033](https://cve.now/CVE-2009-5033.md): IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a "\* \*" argument sequence for a certain tell command, which allows remote a (no CVSS)
- [CVE-2009-5034](https://cve.now/CVE-2009-5034.md): IBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of service (memory consumption and daemon crash) (no CVSS)
- [CVE-2009-5035](https://cve.now/CVE-2009-5035.md): The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operatio (no CVSS)
- [CVE-2009-5036](https://cve.now/CVE-2009-5036.md): traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service (daemon crash) vi (no CVSS)
- [CVE-2010-4544](https://cve.now/CVE-2010-4544.md): Cross-site scripting (XSS) vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2010-4545](https://cve.now/CVE-2010-4545.md): IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (resource consumption and sync outage (no CVSS)
- [CVE-2010-4546](https://cve.now/CVE-2010-4546.md): IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, (no CVSS)
- [CVE-2010-4547](https://cve.now/CVE-2010-4547.md): IBM Lotus Notes Traveler before 8.5.1.3, when a multidomain environment is used, does not properly apply policy documents to mobile users fr (no CVSS)
- [CVE-2010-4548](https://cve.now/CVE-2010-4548.md): IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (daemon crash) by accepting a meeting (no CVSS)
- [CVE-2010-4549](https://cve.now/CVE-2010-4549.md): IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, (no CVSS)
- [CVE-2010-4550](https://cve.now/CVE-2010-4550.md): IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service (sync failure) via a malformed document. (no CVSS)
- [CVE-2010-4551](https://cve.now/CVE-2010-4551.md): IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon (no CVSS)
- [CVE-2010-4552](https://cve.now/CVE-2010-4552.md): Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service (memory consumption and daemon o (no CVSS)
- [CVE-2010-4553](https://cve.now/CVE-2010-4553.md): An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to c (no CVSS)
- [CVE-2010-2569](https://cve.now/CVE-2010-2569.md): pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecifie (no CVSS)
- [CVE-2010-2570](https://cve.now/CVE-2010-2570.md): Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 al (no CVSS)
- [CVE-2010-2571](https://cve.now/CVE-2010-2571.md): Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to e (no CVSS)
- [CVE-2010-2742](https://cve.now/CVE-2010-2742.md): The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, (no CVSS)
- [CVE-2010-3338](https://cve.now/CVE-2010-3338.md): The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly de (no CVSS)
- [CVE-2010-3340](https://cve.now/CVE-2010-3340.md): Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a (no CVSS)
- [CVE-2010-3342](https://cve.now/CVE-2010-3342.md): Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access conten (no CVSS)
- [CVE-2010-3343](https://cve.now/CVE-2010-3343.md): Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2010-3345](https://cve.now/CVE-2010-3345.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2010-3346](https://cve.now/CVE-2010-3346.md): Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2010-3348](https://cve.now/CVE-2010-3348.md): Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access conten (no CVSS)
- [CVE-2010-3937](https://cve.now/CVE-2010-3937.md): Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSE (no CVSS)
- [CVE-2010-3939](https://cve.now/CVE-2010-3939.md): Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and (no CVSS)
- [CVE-2010-3940](https://cve.now/CVE-2010-3940.md): Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis (no CVSS)
- [CVE-2010-3941](https://cve.now/CVE-2010-3941.md): Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis (CVSS 8.4)
- [CVE-2010-3942](https://cve.now/CVE-2010-3942.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2010-3943](https://cve.now/CVE-2010-3943.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2010-3944](https://cve.now/CVE-2010-3944.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which al (no CVSS)
- [CVE-2010-3945](https://cve.now/CVE-2010-3945.md): Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack al (no CVSS)
- [CVE-2010-3946](https://cve.now/CVE-2010-3946.md): Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack (no CVSS)
- [CVE-2010-3947](https://cve.now/CVE-2010-3947.md): Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works (no CVSS)
- [CVE-2010-3949](https://cve.now/CVE-2010-3949.md): Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attac (no CVSS)
- [CVE-2010-3950](https://cve.now/CVE-2010-3950.md): The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert da (no CVSS)
- [CVE-2010-3951](https://cve.now/CVE-2010-3951.md): Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote a (no CVSS)
- [CVE-2010-3952](https://cve.now/CVE-2010-3952.md): The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute (no CVSS)
- [CVE-2010-3954](https://cve.now/CVE-2010-3954.md): Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS)
- [CVE-2010-3955](https://cve.now/CVE-2010-3955.md): pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote (no CVSS)
- [CVE-2010-3956](https://cve.now/CVE-2010-3956.md): The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 (no CVSS)
- [CVE-2010-3957](https://cve.now/CVE-2010-3957.md): Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 (CVSS 7.3)
- [CVE-2010-3959](https://cve.now/CVE-2010-3959.md): The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 (no CVSS)
- [CVE-2010-3960](https://cve.now/CVE-2010-3960.md): Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a cr (no CVSS)
- [CVE-2010-3961](https://cve.now/CVE-2010-3961.md): The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not proper (no CVSS)
- [CVE-2010-3963](https://cve.now/CVE-2010-3963.md): Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 all (no CVSS)
- [CVE-2010-3964](https://cve.now/CVE-2010-3964.md): Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the (no CVSS)
- [CVE-2010-3965](https://cve.now/CVE-2010-3965.md): Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S (no CVSS)
- [CVE-2010-3966](https://cve.now/CVE-2010-3966.md): Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to (no CVSS)
- [CVE-2010-3967](https://cve.now/CVE-2010-3967.md): Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.