# CVEs published 2011-06-24 26 CVEs were published on June 24, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2009-5044](https://cve.now/CVE-2009-5044.md): contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pd (no CVSS) - [CVE-2011-0196](https://cve.now/CVE-2011-0196.md): AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of-bounds read and reboot) via Wi-Fi frames on th (no CVSS) - [CVE-2011-0197](https://cve.now/CVE-2011-0197.md): App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain (no CVSS) - [CVE-2011-0198](https://cve.now/CVE-2011-0198.md): Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code vi (no CVSS) - [CVE-2011-0199](https://cve.now/CVE-2011-0199.md): The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificat (CVSS 5.9) - [CVE-2011-0200](https://cve.now/CVE-2011-0200.md): Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2011-0201](https://cve.now/CVE-2011-0201.md): Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary cod (no CVSS) - [CVE-2011-0202](https://cve.now/CVE-2011-0202.md): Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of serv (no CVSS) - [CVE-2011-0203](https://cve.now/CVE-2011-0203.md): Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list a (no CVSS) - [CVE-2011-0204](https://cve.now/CVE-2011-0204.md): Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS) - [CVE-2011-0205](https://cve.now/CVE-2011-0205.md): Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS) - [CVE-2011-0206](https://cve.now/CVE-2011-0206.md): Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute (no CVSS) - [CVE-2011-0207](https://cve.now/CVE-2011-0207.md): The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which (no CVSS) - [CVE-2011-0208](https://cve.now/CVE-2011-0208.md): QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS) - [CVE-2011-0209](https://cve.now/CVE-2011-0209.md): Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2011-0210](https://cve.now/CVE-2011-0210.md): QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS) - [CVE-2011-0211](https://cve.now/CVE-2011-0211.md): Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2011-0212](https://cve.now/CVE-2011-0212.md): servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet serv (no CVSS) - [CVE-2011-0213](https://cve.now/CVE-2011-0213.md): Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2011-1132](https://cve.now/CVE-2011-1132.md): The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service (NULL pointer derefere (no CVSS) - [CVE-2011-1409](https://cve.now/CVE-2011-1409.md): Frams's Fast File EXchange (F\*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authenti (no CVSS) - [CVE-2011-1770](https://cve.now/CVE-2011-1770.md): Integer underflow in the dccp\_parse\_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to ca (no CVSS) - [CVE-2011-1908](https://cve.now/CVE-2011-1908.md): Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbi (no CVSS) - [CVE-2011-2193](https://cve.now/CVE-2011-2193.md): Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before (no CVSS) - [CVE-2011-2194](https://cve.now/CVE-2011-2194.md): Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of s (no CVSS) - [CVE-2011-2484](https://cve.now/CVE-2011-2484.md): The add\_del\_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-06-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.