# CVEs published 2011-06-09

32 CVEs were published on June 9, 2011: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2011-1708](https://cve.now/CVE-2011-1708.md): Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2011-2471](https://cve.now/CVE-2011-2471.md): utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) (no CVSS)
- [CVE-2011-2472](https://cve.now/CVE-2011-2472.md): Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via (no CVSS)
- [CVE-2011-2473](https://cve.now/CVE-2011-2473.md): The do\_dump\_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files vi (no CVSS)
- [CVE-2011-2474](https://cve.now/CVE-2011-2474.md): Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary fi (no CVSS)
- [CVE-2011-2475](https://cve.now/CVE-2011-2475.md): Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Syb (no CVSS)
- [CVE-2011-1699](https://cve.now/CVE-2011-1699.md): Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2011-1700](https://cve.now/CVE-2011-1700.md): Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2011-1701](https://cve.now/CVE-2011-1701.md): Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2011-1702](https://cve.now/CVE-2011-1702.md): Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2011-1703](https://cve.now/CVE-2011-1703.md): Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2011-1704](https://cve.now/CVE-2011-1704.md): Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2011-1705](https://cve.now/CVE-2011-1705.md): Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2011-1706](https://cve.now/CVE-2011-1706.md): Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2011-1707](https://cve.now/CVE-2011-1707.md): Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2011-1760](https://cve.now/CVE-2011-1760.md): utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metach (no CVSS)
- [CVE-2011-1808](https://cve.now/CVE-2011-1808.md): Use-after-free vulnerability in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2011-1809](https://cve.now/CVE-2011-1809.md): Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2011-1810](https://cve.now/CVE-2011-1810.md): The Cascading Style Sheets (CSS) implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, (no CVSS)
- [CVE-2011-1811](https://cve.now/CVE-2011-1811.md): Google Chrome before 12.0.742.91 does not properly handle a large number of form submissions, which allows remote attackers to cause a denia (no CVSS)
- [CVE-2011-1812](https://cve.now/CVE-2011-1812.md): Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions. (no CVSS)
- [CVE-2011-1813](https://cve.now/CVE-2011-1813.md): Google Chrome before 12.0.742.91 does not properly implement the framework for extensions, which allows remote attackers to cause a denial o (no CVSS)
- [CVE-2011-1814](https://cve.now/CVE-2011-1814.md): Google Chrome before 12.0.742.91 attempts to read data from an uninitialized pointer, which allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2011-1815](https://cve.now/CVE-2011-1815.md): Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions. (no CVSS)
- [CVE-2011-1816](https://cve.now/CVE-2011-1816.md): Use-after-free vulnerability in the developer tools in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2011-1817](https://cve.now/CVE-2011-1817.md): Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a denial of service (m (no CVSS)
- [CVE-2011-1818](https://cve.now/CVE-2011-1818.md): Use-after-free vulnerability in the image loader in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or (no CVSS)
- [CVE-2011-1819](https://cve.now/CVE-2011-1819.md): Google Chrome before 12.0.742.91 allows remote attackers to perform unspecified injection into a chrome:// page via vectors related to exten (no CVSS)
- [CVE-2011-2332](https://cve.now/CVE-2011-2332.md): Google V8, as used in Google Chrome before 12.0.742.91, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. (no CVSS)
- [CVE-2011-2342](https://cve.now/CVE-2011-2342.md): The DOM implementation in Google Chrome before 12.0.742.91 allows remote attackers to bypass the Same Origin Policy via unspecified vectors. (no CVSS)
- [CVE-2010-4804](https://cve.now/CVE-2010-4804.md): The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) B (no CVSS)
- [CVE-2011-1823](https://cve.now/CVE-2011-1823.md): The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF\_NETLINK socket, which allows (CVSS 7.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
