# CVEs published 2011-11-08

11 CVEs were published on November 8, 2011: 1 critical, 1 high. Days are UTC.

- [CVE-2011-2446](https://cve.now/CVE-2011-2446.md): The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memo (no CVSS)
- [CVE-2011-2447](https://cve.now/CVE-2011-2447.md): Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2011-2448](https://cve.now/CVE-2011-2448.md): The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memo (no CVSS)
- [CVE-2011-2449](https://cve.now/CVE-2011-2449.md): The TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (mem (no CVSS)
- [CVE-2011-4000](https://cve.now/CVE-2011-4000.md): Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string. (no CVSS)
- [CVE-2011-2004](https://cve.now/CVE-2011-2004.md): Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows (no CVSS)
- [CVE-2011-2013](https://cve.now/CVE-2011-2013.md): Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold an (CVSS 9.8)
- [CVE-2011-2014](https://cve.now/CVE-2011-2014.md): The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight (no CVSS)
- [CVE-2011-2016](https://cve.now/CVE-2011-2016.md): Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, a (CVSS 7.3)
- [CVE-2011-3607](https://cve.now/CVE-2011-3607.md): Integer overflow in the ap\_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when t (no CVSS)
- [CVE-2011-4415](https://cve.now/CVE-2011-4415.md): The ap\_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod\_setenvif modu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-11-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.