# CVEs published 2011-06-16

77 CVEs were published on June 16, 2011: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2011-0317](https://cve.now/CVE-2011-0317.md): Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS)
- [CVE-2011-0318](https://cve.now/CVE-2011-0318.md): Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS)
- [CVE-2011-0319](https://cve.now/CVE-2011-0319.md): Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS)
- [CVE-2011-0320](https://cve.now/CVE-2011-0320.md): Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS)
- [CVE-2011-0335](https://cve.now/CVE-2011-0335.md): Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS)
- [CVE-2011-0629](https://cve.now/CVE-2011-0629.md): Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authent (no CVSS)
- [CVE-2011-2091](https://cve.now/CVE-2011-2091.md): Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown ve (no CVSS)
- [CVE-2011-2092](https://cve.now/CVE-2011-2092.md): Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creatio (no CVSS)
- [CVE-2011-2093](https://cve.now/CVE-2011-2093.md): Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object gr (no CVSS)
- [CVE-2011-2094](https://cve.now/CVE-2011-2094.md): Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers (no CVSS)
- [CVE-2011-2095](https://cve.now/CVE-2011-2095.md): Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers (no CVSS)
- [CVE-2011-2096](https://cve.now/CVE-2011-2096.md): Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows (no CVSS)
- [CVE-2011-2097](https://cve.now/CVE-2011-2097.md): Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers (no CVSS)
- [CVE-2011-2098](https://cve.now/CVE-2011-2098.md): Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary (no CVSS)
- [CVE-2011-2099](https://cve.now/CVE-2011-2099.md): Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary (no CVSS)
- [CVE-2011-2100](https://cve.now/CVE-2011-2100.md): Untrusted search path vulnerability in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows allows loc (no CVSS)
- [CVE-2011-2101](https://cve.now/CVE-2011-2101.md): Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, whi (no CVSS)
- [CVE-2011-2102](https://cve.now/CVE-2011-2102.md): Unspecified vulnerability in Adobe Reader and Acrobat before 10.1 on Windows and Mac OS X allows attackers to bypass intended access restric (no CVSS)
- [CVE-2011-2103](https://cve.now/CVE-2011-2103.md): Adobe Reader and Acrobat 8.x before 8.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memo (no CVSS)
- [CVE-2011-2104](https://cve.now/CVE-2011-2104.md): Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of (no CVSS)
- [CVE-2011-2105](https://cve.now/CVE-2011-2105.md): Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of (no CVSS)
- [CVE-2011-2106](https://cve.now/CVE-2011-2106.md): Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Mac OS X allow attackers to execute arbitrary code or cau (no CVSS)
- [CVE-2011-2108](https://cve.now/CVE-2011-2108.md): Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw." (no CVSS)
- [CVE-2011-2109](https://cve.now/CVE-2011-2109.md): Multiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecifi (no CVSS)
- [CVE-2011-2110](https://cve.now/CVE-2011-2110.md): Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attack (no CVSS)
- [CVE-2011-2111](https://cve.now/CVE-2011-2111.md): IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS)
- [CVE-2011-2112](https://cve.now/CVE-2011-2112.md): Multiple buffer overflows in IML32.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified (no CVSS)
- [CVE-2011-2113](https://cve.now/CVE-2011-2113.md): Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary (no CVSS)
- [CVE-2011-2114](https://cve.now/CVE-2011-2114.md): Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2011-2115](https://cve.now/CVE-2011-2115.md): IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory (no CVSS)
- [CVE-2011-2116](https://cve.now/CVE-2011-2116.md): IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS)
- [CVE-2011-2117](https://cve.now/CVE-2011-2117.md): Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2011-2118](https://cve.now/CVE-2011-2118.md): The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, (no CVSS)
- [CVE-2011-2119](https://cve.now/CVE-2011-2119.md): Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS)
- [CVE-2011-2120](https://cve.now/CVE-2011-2120.md): Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via (no CVSS)
- [CVE-2011-2121](https://cve.now/CVE-2011-2121.md): Integer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2011-2122](https://cve.now/CVE-2011-2122.md): Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS)
- [CVE-2011-2123](https://cve.now/CVE-2011-2123.md): Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbi (no CVSS)
- [CVE-2011-2124](https://cve.now/CVE-2011-2124.md): Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2011-2125](https://cve.now/CVE-2011-2125.md): Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vector (no CVSS)
- [CVE-2011-2126](https://cve.now/CVE-2011-2126.md): Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2011-2127](https://cve.now/CVE-2011-2127.md): Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2011-2128](https://cve.now/CVE-2011-2128.md): Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2011-2202](https://cve.now/CVE-2011-2202.md): The rfc1867\_post\_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST req (no CVSS)
- [CVE-2011-0658](https://cve.now/CVE-2011-0658.md): Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2 (no CVSS)
- [CVE-2011-0664](https://cve.now/CVE-2011-0664.md): Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate (no CVSS)
- [CVE-2011-1246](https://cve.now/CVE-2011-1246.md): Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensiti (no CVSS)
- [CVE-2011-1249](https://cve.now/CVE-2011-1249.md): The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Wind (no CVSS)
- [CVE-2011-1250](https://cve.now/CVE-2011-1250.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1251](https://cve.now/CVE-2011-1251.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2011-1252](https://cve.now/CVE-2011-1252.md): Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office Sha (CVSS 6.1)
- [CVE-2011-1254](https://cve.now/CVE-2011-1254.md): Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1255](https://cve.now/CVE-2011-1255.md): The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly hand (no CVSS)
- [CVE-2011-1256](https://cve.now/CVE-2011-1256.md): Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1258](https://cve.now/CVE-2011-1258.md): Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensiti (no CVSS)
- [CVE-2011-1260](https://cve.now/CVE-2011-1260.md): Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a (no CVSS)
- [CVE-2011-1261](https://cve.now/CVE-2011-1261.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1262](https://cve.now/CVE-2011-1262.md): Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1264](https://cve.now/CVE-2011-1264.md): Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Se (no CVSS)
- [CVE-2011-1266](https://cve.now/CVE-2011-1266.md): The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in me (no CVSS)
- [CVE-2011-1267](https://cve.now/CVE-2011-1267.md): The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remo (no CVSS)
- [CVE-2011-1268](https://cve.now/CVE-2011-1268.md): The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, a (no CVSS)
- [CVE-2011-1272](https://cve.now/CVE-2011-1272.md): Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; an (no CVSS)
- [CVE-2011-1273](https://cve.now/CVE-2011-1273.md): Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel V (no CVSS)
- [CVE-2011-1274](https://cve.now/CVE-2011-1274.md): Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; an (no CVSS)
- [CVE-2011-1275](https://cve.now/CVE-2011-1275.md): Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record in (no CVSS)
- [CVE-2011-1276](https://cve.now/CVE-2011-1276.md): Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; E (no CVSS)
- [CVE-2011-1277](https://cve.now/CVE-2011-1277.md): Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during (no CVSS)
- [CVE-2011-1278](https://cve.now/CVE-2011-1278.md): Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which all (no CVSS)
- [CVE-2011-1279](https://cve.now/CVE-2011-1279.md): Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate rec (no CVSS)
- [CVE-2011-1280](https://cve.now/CVE-2011-1280.md): The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio (no CVSS)
- [CVE-2011-1868](https://cve.now/CVE-2011-1868.md): The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields i (no CVSS)
- [CVE-2011-1869](https://cve.now/CVE-2011-1869.md): The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Wi (no CVSS)
- [CVE-2011-1872](https://cve.now/CVE-2011-1872.md): Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop (no CVSS)
- [CVE-2011-1873](https://cve.now/CVE-2011-1873.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 G (no CVSS)
- [CVE-2011-1889](https://cve.now/CVE-2011-1889.md): The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execu (CVSS 9.8, KEV)
- [CVE-2011-1894](https://cve.now/CVE-2011-1894.md): The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-06-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.