# CVEs published 2011-01-14

34 CVEs were published on January 14, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0115](https://cve.now/CVE-2010-0115.md): SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers (no CVSS)
- [CVE-2010-3086](https://cve.now/CVE-2010-3086.md): include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a d (no CVSS)
- [CVE-2010-4335](https://cve.now/CVE-2010-4335.md): The \_validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to mo (no CVSS, cakephp/cakephp)
- [CVE-2010-4337](https://cve.now/CVE-2010-4337.md): The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-err (no CVSS)
- [CVE-2010-4339](https://cve.now/CVE-2010-4339.md): Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted Fro (no CVSS)
- [CVE-2010-4566](https://cve.now/CVE-2010-4566.md): The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NT (no CVSS)
- [CVE-2010-3833](https://cve.now/CVE-2010-3833.md): MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to c (no CVSS)
- [CVE-2010-3834](https://cve.now/CVE-2010-3834.md): Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a d (no CVSS)
- [CVE-2010-3835](https://cve.now/CVE-2010-3835.md): MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by perform (no CVSS)
- [CVE-2010-3836](https://cve.now/CVE-2010-3836.md): MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion f (no CVSS)
- [CVE-2010-3837](https://cve.now/CVE-2010-3837.md): MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server cras (no CVSS)
- [CVE-2010-3838](https://cve.now/CVE-2010-3838.md): MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server cras (no CVSS)
- [CVE-2010-3839](https://cve.now/CVE-2010-3839.md): MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple inv (no CVSS)
- [CVE-2010-3840](https://cve.now/CVE-2010-3840.md): The Gis\_line\_string::init\_from\_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial (no CVSS)
- [CVE-2010-4694](https://cve.now/CVE-2010-4694.md): Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application (no CVSS)
- [CVE-2010-4695](https://cve.now/CVE-2010-4695.md): A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png\_2.5.2-1 (no CVSS)
- [CVE-2009-5018](https://cve.now/CVE-2009-5018.md): Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via (no CVSS)
- [CVE-2011-0470](https://cve.now/CVE-2011-0470.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle extensions notification, which allows remote attack (no CVSS)
- [CVE-2011-0471](https://cve.now/CVE-2011-0471.md): The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, wh (no CVSS)
- [CVE-2011-0472](https://cve.now/CVE-2011-0472.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-as (no CVSS)
- [CVE-2011-0473](https://cve.now/CVE-2011-0473.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in con (no CVSS)
- [CVE-2011-0474](https://cve.now/CVE-2011-0474.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in con (no CVSS)
- [CVE-2011-0475](https://cve.now/CVE-2011-0475.md): Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial (no CVSS)
- [CVE-2011-0476](https://cve.now/CVE-2011-0476.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corrupti (no CVSS)
- [CVE-2011-0477](https://cve.now/CVE-2011-0477.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remot (no CVSS)
- [CVE-2011-0478](https://cve.now/CVE-2011-0478.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to (no CVSS)
- [CVE-2011-0479](https://cve.now/CVE-2011-0479.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to (no CVSS)
- [CVE-2011-0480](https://cve.now/CVE-2011-0480.md): Multiple buffer overflows in vorbis\_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before (no CVSS)
- [CVE-2011-0481](https://cve.now/CVE-2011-0481.md): Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or (no CVSS)
- [CVE-2011-0482](https://cve.now/CVE-2011-0482.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling (no CVSS)
- [CVE-2011-0483](https://cve.now/CVE-2011-0483.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling (no CVSS)
- [CVE-2011-0484](https://cve.now/CVE-2011-0484.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to (no CVSS)
- [CVE-2011-0485](https://cve.now/CVE-2011-0485.md): Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execu (no CVSS)
- [CVE-2010-4334](https://cve.now/CVE-2010-4334.md): The IO::Socket::SSL module 1.35 for Perl, when verify\_mode is not VERIFY\_NONE, fails open to VERIFY\_NONE instead of throwing an error when a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.