# CVEs published 2011-02-10

95 CVEs were published on February 10, 2011: 0 critical, 1 high. Days are UTC.

- [CVE-2011-0976](https://cve.now/CVE-2011-0976.md): Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatib (no CVSS)
- [CVE-2011-0977](https://cve.now/CVE-2011-0977.md): Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File F (no CVSS)
- [CVE-2011-0978](https://cve.now/CVE-2011-0978.md): Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibi (no CVSS)
- [CVE-2011-0979](https://cve.now/CVE-2011-0979.md): Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Exc (no CVSS)
- [CVE-2011-0980](https://cve.now/CVE-2011-0980.md): Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office (no CVSS)
- [CVE-2011-0981](https://cve.now/CVE-2011-0981.md): Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-0982](https://cve.now/CVE-2011-0982.md): Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspec (no CVSS)
- [CVE-2011-0983](https://cve.now/CVE-2011-0983.md): Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or pos (no CVSS)
- [CVE-2011-0984](https://cve.now/CVE-2011-0984.md): Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds (no CVSS)
- [CVE-2011-0985](https://cve.now/CVE-2011-0985.md): Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remot (no CVSS)
- [CVE-2010-3718](https://cve.now/CVE-2010-3718.md): Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read- (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2010-4022](https://cve.now/CVE-2010-4022.md): The do\_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalon (no CVSS)
- [CVE-2010-4327](https://cve.now/CVE-2010-4327.md): Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to c (no CVSS)
- [CVE-2011-0281](https://cve.now/CVE-2011-0281.md): The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used (no CVSS)
- [CVE-2011-0282](https://cve.now/CVE-2011-0282.md): The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to c (no CVSS)
- [CVE-2011-0283](https://cve.now/CVE-2011-0283.md): The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to cause a denial of service (NULL pointer derefe (no CVSS)
- [CVE-2011-0534](https://cve.now/CVE-2011-0534.md): Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2011-0539](https://cve.now/CVE-2011-0539.md): The key\_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option i (CVSS 7.5)
- [CVE-2011-0562](https://cve.now/CVE-2011-0562.md): Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows (no CVSS)
- [CVE-2011-0563](https://cve.now/CVE-2011-0563.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbit (no CVSS)
- [CVE-2011-0564](https://cve.now/CVE-2011-0564.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for unspecified files, w (no CVSS)
- [CVE-2011-0565](https://cve.now/CVE-2011-0565.md): Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X all (no CVSS)
- [CVE-2011-0566](https://cve.now/CVE-2011-0566.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0567](https://cve.now/CVE-2011-0567.md): AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote att (no CVSS)
- [CVE-2011-0568](https://cve.now/CVE-2011-0568.md): Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attacker (no CVSS)
- [CVE-2011-0570](https://cve.now/CVE-2011-0570.md): Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows (no CVSS)
- [CVE-2011-0585](https://cve.now/CVE-2011-0585.md): Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X all (no CVSS)
- [CVE-2011-0586](https://cve.now/CVE-2011-0586.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspeci (no CVSS)
- [CVE-2011-0587](https://cve.now/CVE-2011-0587.md): Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows a (no CVSS)
- [CVE-2011-0588](https://cve.now/CVE-2011-0588.md): Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows (no CVSS)
- [CVE-2011-0589](https://cve.now/CVE-2011-0589.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbit (no CVSS)
- [CVE-2011-0590](https://cve.now/CVE-2011-0590.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0591](https://cve.now/CVE-2011-0591.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0592](https://cve.now/CVE-2011-0592.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0593](https://cve.now/CVE-2011-0593.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0594](https://cve.now/CVE-2011-0594.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0595](https://cve.now/CVE-2011-0595.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0596](https://cve.now/CVE-2011-0596.md): The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and (no CVSS)
- [CVE-2011-0598](https://cve.now/CVE-2011-0598.md): Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X a (no CVSS)
- [CVE-2011-0599](https://cve.now/CVE-2011-0599.md): The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows a (no CVSS)
- [CVE-2011-0600](https://cve.now/CVE-2011-0600.md): The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot (no CVSS)
- [CVE-2011-0602](https://cve.now/CVE-2011-0602.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0603](https://cve.now/CVE-2011-0603.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut (no CVSS)
- [CVE-2011-0604](https://cve.now/CVE-2011-0604.md): Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows a (no CVSS)
- [CVE-2011-0605](https://cve.now/CVE-2011-0605.md): Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allow attackers to execute arbitrary code or (no CVSS)
- [CVE-2011-0606](https://cve.now/CVE-2011-0606.md): Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows an (no CVSS)
- [CVE-2011-0647](https://cve.now/CVE-2011-0647.md): The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows re (no CVSS)
- [CVE-2011-0758](https://cve.now/CVE-2011-0758.md): The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denia (no CVSS)
- [CVE-2011-0975](https://cve.now/CVE-2011-0975.md): Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, a (no CVSS)
- [CVE-2010-2587](https://cve.now/CVE-2010-2587.md): The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (m (no CVSS)
- [CVE-2010-2588](https://cve.now/CVE-2010-2588.md): The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (m (no CVSS)
- [CVE-2010-2589](https://cve.now/CVE-2010-2589.md): Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspeci (no CVSS)
- [CVE-2010-4093](https://cve.now/CVE-2010-4093.md): Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2010-4187](https://cve.now/CVE-2010-4187.md): Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a m (no CVSS)
- [CVE-2010-4188](https://cve.now/CVE-2010-4188.md): The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (m (no CVSS)
- [CVE-2010-4189](https://cve.now/CVE-2010-4189.md): The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory (no CVSS)
- [CVE-2010-4190](https://cve.now/CVE-2010-4190.md): Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a D (no CVSS)
- [CVE-2010-4191](https://cve.now/CVE-2010-4191.md): Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2010-4192](https://cve.now/CVE-2010-4192.md): Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a D (no CVSS)
- [CVE-2010-4193](https://cve.now/CVE-2010-4193.md): Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code (no CVSS)
- [CVE-2010-4194](https://cve.now/CVE-2010-4194.md): The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers (no CVSS)
- [CVE-2010-4195](https://cve.now/CVE-2010-4195.md): The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to (no CVSS)
- [CVE-2010-4196](https://cve.now/CVE-2010-4196.md): The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows at (no CVSS)
- [CVE-2010-4306](https://cve.now/CVE-2010-4306.md): Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2010-4307](https://cve.now/CVE-2010-4307.md): Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2011-0033](https://cve.now/CVE-2011-0033.md): The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windo (no CVSS)
- [CVE-2011-0035](https://cve.now/CVE-2011-0035.md): Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-0036](https://cve.now/CVE-2011-0036.md): Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-0038](https://cve.now/CVE-2011-0038.md): Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.d (no CVSS)
- [CVE-2011-0043](https://cve.now/CVE-2011-0043.md): Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileg (no CVSS)
- [CVE-2011-0091](https://cve.now/CVE-2011-0091.md): Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption (no CVSS)
- [CVE-2011-0092](https://cve.now/CVE-2011-0092.md): The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to ex (no CVSS)
- [CVE-2011-0093](https://cve.now/CVE-2011-0093.md): ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, whic (no CVSS)
- [CVE-2011-0555](https://cve.now/CVE-2011-0555.md): The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2011-0556](https://cve.now/CVE-2011-0556.md): The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2011-0557](https://cve.now/CVE-2011-0557.md): Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a l (no CVSS)
- [CVE-2011-0558](https://cve.now/CVE-2011-0558.md): Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the A (no CVSS)
- [CVE-2011-0559](https://cve.now/CVE-2011-0559.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafte (no CVSS)
- [CVE-2011-0560](https://cve.now/CVE-2011-0560.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0561](https://cve.now/CVE-2011-0561.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0569](https://cve.now/CVE-2011-0569.md): The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2011-0571](https://cve.now/CVE-2011-0571.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0572](https://cve.now/CVE-2011-0572.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0573](https://cve.now/CVE-2011-0573.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0574](https://cve.now/CVE-2011-0574.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0575](https://cve.now/CVE-2011-0575.md): Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in (no CVSS)
- [CVE-2011-0577](https://cve.now/CVE-2011-0577.md): Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font. (no CVSS)
- [CVE-2011-0578](https://cve.now/CVE-2011-0578.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0580](https://cve.now/CVE-2011-0580.md): Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attacker (no CVSS)
- [CVE-2011-0581](https://cve.now/CVE-2011-0581.md): Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and co (no CVSS)
- [CVE-2011-0582](https://cve.now/CVE-2011-0582.md): Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive informatio (no CVSS)
- [CVE-2011-0583](https://cve.now/CVE-2011-0583.md): Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2011-0584](https://cve.now/CVE-2011-0584.md): Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors. (no CVSS)
- [CVE-2011-0607](https://cve.now/CVE-2011-0607.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)
- [CVE-2011-0608](https://cve.now/CVE-2011-0608.md): Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-02-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.