# CVEs published 2011-08-10

47 CVEs were published on August 10, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2135](https://cve.now/CVE-2011-2135.md): Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o (no CVSS)
- [CVE-2011-2136](https://cve.now/CVE-2011-2136.md): Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adob (no CVSS)
- [CVE-2011-2138](https://cve.now/CVE-2011-2138.md): Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adob (no CVSS)
- [CVE-2011-2139](https://cve.now/CVE-2011-2139.md): Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o (no CVSS)
- [CVE-2011-2140](https://cve.now/CVE-2011-2140.md): Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o (no CVSS)
- [CVE-2011-2414](https://cve.now/CVE-2011-2414.md): Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe (no CVSS)
- [CVE-2011-2415](https://cve.now/CVE-2011-2415.md): Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe (no CVSS)
- [CVE-2011-2416](https://cve.now/CVE-2011-2416.md): Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adob (no CVSS)
- [CVE-2011-2417](https://cve.now/CVE-2011-2417.md): Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o (no CVSS)
- [CVE-2011-2425](https://cve.now/CVE-2011-2425.md): Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o (no CVSS)
- [CVE-2011-1257](https://cve.now/CVE-2011-1257.md): Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS)
- [CVE-2011-1263](https://cve.now/CVE-2011-1263.md): Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 (no CVSS)
- [CVE-2011-1871](https://cve.now/CVE-2011-1871.md): Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows rem (no CVSS)
- [CVE-2011-1960](https://cve.now/CVE-2011-1960.md): Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access conte (no CVSS)
- [CVE-2011-1961](https://cve.now/CVE-2011-1961.md): The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote atta (no CVSS)
- [CVE-2011-1962](https://cve.now/CVE-2011-1962.md): Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read cont (no CVSS)
- [CVE-2011-1963](https://cve.now/CVE-2011-1963.md): Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1964](https://cve.now/CVE-2011-1964.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1965](https://cve.now/CVE-2011-1965.md): Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-base (no CVSS)
- [CVE-2011-1966](https://cve.now/CVE-2011-1966.md): The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing (no CVSS)
- [CVE-2011-1967](https://cve.now/CVE-2011-1967.md): Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 20 (no CVSS)
- [CVE-2011-1968](https://cve.now/CVE-2011-1968.md): The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process p (no CVSS)
- [CVE-2011-1970](https://cve.now/CVE-2011-1970.md): The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which a (no CVSS)
- [CVE-2011-1971](https://cve.now/CVE-2011-1971.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file (no CVSS)
- [CVE-2011-1972](https://cve.now/CVE-2011-1972.md): Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allo (no CVSS)
- [CVE-2011-1974](https://cve.now/CVE-2011-1974.md): NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not (no CVSS)
- [CVE-2011-1975](https://cve.now/CVE-2011-1975.md): Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Wi (no CVSS)
- [CVE-2011-1976](https://cve.now/CVE-2011-1976.md): Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows (no CVSS)
- [CVE-2011-1977](https://cve.now/CVE-2011-1977.md): The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify fun (no CVSS)
- [CVE-2011-1978](https://cve.now/CVE-2011-1978.md): Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers (no CVSS)
- [CVE-2011-1979](https://cve.now/CVE-2011-1979.md): Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers (no CVSS)
- [CVE-2011-2130](https://cve.now/CVE-2011-2130.md): Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe (no CVSS)
- [CVE-2011-2134](https://cve.now/CVE-2011-2134.md): Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe (no CVSS)
- [CVE-2011-2137](https://cve.now/CVE-2011-2137.md): Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe (no CVSS)
- [CVE-2011-3125](https://cve.now/CVE-2011-3125.md): Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various secu (no CVSS)
- [CVE-2011-3126](https://cve.now/CVE-2011-3126.md): WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects. (no CVSS)
- [CVE-2011-3127](https://cve.now/CVE-2011-3127.md): WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party (no CVSS)
- [CVE-2011-3128](https://cve.now/CVE-2011-3128.md): WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain se (no CVSS)
- [CVE-2011-3129](https://cve.now/CVE-2011-3129.md): The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," (no CVSS)
- [CVE-2011-3130](https://cve.now/CVE-2011-3130.md): wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy quer (no CVSS)
- [CVE-2011-2178](https://cve.now/CVE-2011-2178.md): The virSecurityManagerGetPrivateData function in security/security\_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a si (no CVSS)
- [CVE-2011-2511](https://cve.now/CVE-2011-2511.md): Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execut (no CVSS)
- [CVE-2011-3006](https://cve.now/CVE-2011-3006.md): The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass (no CVSS)
- [CVE-2011-3007](https://cve.now/CVE-2011-3007.md): The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitra (no CVSS)
- [CVE-2011-3122](https://cve.now/CVE-2011-3122.md): Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media securi (no CVSS)
- [CVE-2011-3123](https://cve.now/CVE-2011-3123.md): IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, (no CVSS)
- [CVE-2011-3124](https://cve.now/CVE-2011-3124.md): IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.