# CVEs published 2011-04-13

63 CVEs were published on April 13, 2011: 1 critical, 6 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2011-0989](https://cve.now/CVE-2011-0989.md): The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does no (no CVSS)
- [CVE-2011-0990](https://cve.now/CVE-2011-0990.md): Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x bef (no CVSS)
- [CVE-2011-0991](https://cve.now/CVE-2011-0991.md): Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denia (no CVSS)
- [CVE-2011-0992](https://cve.now/CVE-2011-0992.md): Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denia (no CVSS)
- [CVE-2011-0671](https://cve.now/CVE-2011-0671.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (CVSS 8.4)
- [CVE-2011-0672](https://cve.now/CVE-2011-0672.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-0673](https://cve.now/CVE-2011-0673.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application that trigg (no CVSS)
- [CVE-2011-0674](https://cve.now/CVE-2011-0674.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-0675](https://cve.now/CVE-2011-0675.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-0676](https://cve.now/CVE-2011-0676.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (CVSS 7.8)
- [CVE-2011-0677](https://cve.now/CVE-2011-0677.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1225](https://cve.now/CVE-2011-1225.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1226](https://cve.now/CVE-2011-1226.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1227](https://cve.now/CVE-2011-1227.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1228](https://cve.now/CVE-2011-1228.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1229](https://cve.now/CVE-2011-1229.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1230](https://cve.now/CVE-2011-1230.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1231](https://cve.now/CVE-2011-1231.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (CVSS 8.4)
- [CVE-2011-1232](https://cve.now/CVE-2011-1232.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1233](https://cve.now/CVE-2011-1233.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve (no CVSS)
- [CVE-2011-1234](https://cve.now/CVE-2011-1234.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1235](https://cve.now/CVE-2011-1235.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1236](https://cve.now/CVE-2011-1236.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (CVSS 7.8)
- [CVE-2011-1237](https://cve.now/CVE-2011-1237.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1238](https://cve.now/CVE-2011-1238.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1239](https://cve.now/CVE-2011-1239.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1240](https://cve.now/CVE-2011-1240.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1241](https://cve.now/CVE-2011-1241.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1242](https://cve.now/CVE-2011-1242.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2010-3958](https://cve.now/CVE-2010-3958.md): The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows rem (no CVSS)
- [CVE-2010-3974](https://cve.now/CVE-2010-3974.md): fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows S (no CVSS)
- [CVE-2011-0028](https://cve.now/CVE-2011-0028.md): WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attack (no CVSS)
- [CVE-2011-0034](https://cve.now/CVE-2011-0034.md): Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server (no CVSS)
- [CVE-2011-0041](https://cve.now/CVE-2011-0041.md): Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Ser (no CVSS)
- [CVE-2011-0094](https://cve.now/CVE-2011-0094.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code by accessing an object (no CVSS)
- [CVE-2011-0097](https://cve.now/CVE-2011-0097.md): Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter fo (no CVSS)
- [CVE-2011-0098](https://cve.now/CVE-2011-0098.md): Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Conve (no CVSS)
- [CVE-2011-0101](https://cve.now/CVE-2011-0101.md): Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Re (no CVSS)
- [CVE-2011-0103](https://cve.now/CVE-2011-0103.md): Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to ex (no CVSS)
- [CVE-2011-0104](https://cve.now/CVE-2011-0104.md): Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to ex (no CVSS)
- [CVE-2011-0105](https://cve.now/CVE-2011-0105.md): Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uni (no CVSS)
- [CVE-2011-0107](https://cve.now/CVE-2011-0107.md): Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges v (no CVSS)
- [CVE-2011-0655](https://cve.now/CVE-2011-0655.md): Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pa (no CVSS)
- [CVE-2011-0656](https://cve.now/CVE-2011-0656.md): Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Of (no CVSS)
- [CVE-2011-0657](https://cve.now/CVE-2011-0657.md): DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Go (CVSS 9.8)
- [CVE-2011-0660](https://cve.now/CVE-2011-0660.md): The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, a (no CVSS)
- [CVE-2011-0661](https://cve.now/CVE-2011-0661.md): The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP (no CVSS)
- [CVE-2011-0662](https://cve.now/CVE-2011-0662.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-0663](https://cve.now/CVE-2011-0663.md): Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote atta (CVSS 8.8)
- [CVE-2011-0665](https://cve.now/CVE-2011-0665.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-0666](https://cve.now/CVE-2011-0666.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-0667](https://cve.now/CVE-2011-0667.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-0670](https://cve.now/CVE-2011-0670.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)
- [CVE-2011-1243](https://cve.now/CVE-2011-1243.md): The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2011-1244](https://cve.now/CVE-2011-1244.md): Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to ob (no CVSS)
- [CVE-2011-1245](https://cve.now/CVE-2011-1245.md): Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a (1) different domain or (2) different zone, w (no CVSS)
- [CVE-2011-0611](https://cve.now/CVE-2011-0611.md): Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6. (CVSS 8.8, KEV)
- [CVE-2011-0746](https://cve.now/CVE-2011-0746.md): Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding\_Edit\_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to (no CVSS)
- [CVE-2011-0748](https://cve.now/CVE-2011-0748.md): Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of (no CVSS)
- [CVE-2011-0996](https://cve.now/CVE-2011-0996.md): dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP messa (no CVSS)
- [CVE-2011-1500](https://cve.now/CVE-2011-1500.md): PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory (no CVSS)
- [CVE-2011-1682](https://cve.now/CVE-2011-1682.md): Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authenticatio (no CVSS)
- [CVE-2011-1683](https://cve.now/CVE-2011-1683.md): IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS use (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.