# CVEs published 2011-01-07

56 CVEs were published on January 7, 2011: 0 critical, 1 high. Days are UTC.

- [CVE-2010-0215](https://cve.now/CVE-2010-0215.md): ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an attachment or (2) subs (no CVSS)
- [CVE-2010-3201](https://cve.now/CVE-2010-3201.md): Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2010-3311](https://cve.now/CVE-2010-3311.md): Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial (no CVSS)
- [CVE-2010-3984](https://cve.now/CVE-2010-3984.md): Buffer overflow in mng\_core\_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 (no CVSS)
- [CVE-2010-4322](https://cve.now/CVE-2010-4322.md): Cross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell Vibe OnPrem 3 BETA allows remote authenticated users to inject arbitrar (no CVSS)
- [CVE-2010-4688](https://cve.now/CVE-2010-4688.md): Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before (no CVSS)
- [CVE-2010-4689](https://cve.now/CVE-2010-4689.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migra (no CVSS)
- [CVE-2010-4690](https://cve.now/CVE-2010-4690.md): The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not (no CVSS)
- [CVE-2010-4691](https://cve.now/CVE-2010-4691.md): Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attacker (no CVSS)
- [CVE-2010-4692](https://cve.now/CVE-2010-4692.md): Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attacker (no CVSS)
- [CVE-2011-0346](https://cve.now/CVE-2011-0346.md): Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attacke (CVSS 8.1)
- [CVE-2011-0347](https://cve.now/CVE-2011-0347.md): Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via (no CVSS)
- [CVE-2010-4523](https://cve.now/CVE-2010-4523.md): Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary c (no CVSS)
- [CVE-2010-4540](https://cve.now/CVE-2010-4540.md): Stack-based buffer overflow in the load\_preset\_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS \> LIGHT" plugin (no CVSS)
- [CVE-2010-4541](https://cve.now/CVE-2010-4541.md): Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows (no CVSS)
- [CVE-2010-4542](https://cve.now/CVE-2010-4542.md): Stack-based buffer overflow in the gfig\_read\_parameter\_gimp\_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 all (no CVSS)
- [CVE-2010-4543](https://cve.now/CVE-2010-4543.md): Heap-based buffer overflow in the read\_channel\_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote a (no CVSS)
- [CVE-2009-5038](https://cve.now/CVE-2009-5038.md): Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote a (no CVSS)
- [CVE-2009-5039](https://cve.now/CVE-2009-5039.md): Memory leak in the gk\_circuit\_info\_do\_in\_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows remote attackers to c (no CVSS)
- [CVE-2009-5040](https://cve.now/CVE-2009-5040.md): CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by usi (no CVSS)
- [CVE-2010-2640](https://cve.now/CVE-2010-2640.md): Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of (no CVSS)
- [CVE-2010-2641](https://cve.now/CVE-2010-2641.md): Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of (no CVSS)
- [CVE-2010-2642](https://cve.now/CVE-2010-2642.md): Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possi (no CVSS)
- [CVE-2010-2643](https://cve.now/CVE-2010-2643.md): Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-3847](https://cve.now/CVE-2010-3847.md): elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value (no CVSS)
- [CVE-2010-3856](https://cve.now/CVE-2010-3856.md): ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD\_AUDIT envi (no CVSS)
- [CVE-2010-4324](https://cve.now/CVE-2010-4324.md): Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 37 (no CVSS)
- [CVE-2010-4496](https://cve.now/CVE-2010-4496.md): Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager befor (no CVSS)
- [CVE-2010-4497](https://cve.now/CVE-2010-4497.md): Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager bef (no CVSS)
- [CVE-2010-4498](https://cve.now/CVE-2010-4498.md): Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and A (no CVSS)
- [CVE-2010-4499](https://cve.now/CVE-2010-4499.md): Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 (no CVSS)
- [CVE-2010-4538](https://cve.now/CVE-2010-4538.md): Buffer overflow in the sect\_enttec\_dmx\_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a (no CVSS)
- [CVE-2010-4539](https://cve.now/CVE-2010-4539.md): The walk function in repos.c in the mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows (no CVSS)
- [CVE-2010-4644](https://cve.now/CVE-2010-4644.md): Multiple memory leaks in rev\_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory (no CVSS)
- [CVE-2010-4683](https://cve.now/CVE-2010-4683.md): Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumption) by sending a craft (no CVSS)
- [CVE-2010-4684](https://cve.now/CVE-2010-4684.md): Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service (device crash) via (no CVSS)
- [CVE-2010-4685](https://cve.now/CVE-2010-4685.md): Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users (no CVSS)
- [CVE-2010-4686](https://cve.now/CVE-2010-4686.md): CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculia (no CVSS)
- [CVE-2010-4687](https://cve.now/CVE-2010-4687.md): STCAPP (aka the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1 does not properly handle multiple calls to a shared line, (no CVSS)
- [CVE-2009-5037](https://cve.now/CVE-2009-5037.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-4160](https://cve.now/CVE-2010-4160.md): Multiple integer overflows in the (1) pppol2tp\_sendmsg function in net/l2tp/l2tp\_ppp.c, and the (2) l2tp\_ip\_sendmsg function in net/l2tp/l2t (no CVSS)
- [CVE-2010-4528](https://cve.now/CVE-2010-4528.md): directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a (no CVSS)
- [CVE-2010-4669](https://cve.now/CVE-2010-4669.md): The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows S (no CVSS)
- [CVE-2010-4670](https://cve.now/CVE-2010-4670.md): The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with s (no CVSS)
- [CVE-2010-4671](https://cve.now/CVE-2010-4671.md): The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote attackers to cause a deni (no CVSS)
- [CVE-2010-4672](https://cve.now/CVE-2010-4672.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of se (no CVSS)
- [CVE-2010-4673](https://cve.now/CVE-2010-4673.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of se (no CVSS)
- [CVE-2010-4674](https://cve.now/CVE-2010-4674.md): Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote att (no CVSS)
- [CVE-2010-4675](https://cve.now/CVE-2010-4675.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which (no CVSS)
- [CVE-2010-4676](https://cve.now/CVE-2010-4676.md): Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenti (no CVSS)
- [CVE-2010-4677](https://cve.now/CVE-2010-4677.md): emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial (no CVSS)
- [CVE-2010-4678](https://cve.now/CVE-2010-4678.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has (no CVSS)
- [CVE-2010-4679](https://cve.now/CVE-2010-4679.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Pr (no CVSS)
- [CVE-2010-4680](https://cve.now/CVE-2010-4680.md): The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of (no CVSS)
- [CVE-2010-4681](https://cve.now/CVE-2010-4681.md): Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attacker (no CVSS)
- [CVE-2010-4682](https://cve.now/CVE-2010-4682.md): Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-01-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.