# CVEs published 2011-12-25

16 CVEs were published on December 25, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5109](https://cve.now/CVE-2009-5109.md): Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file. (no CVSS)
- [CVE-2010-5081](https://cve.now/CVE-2010-5081.md): Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .p (no CVSS)
- [CVE-2011-4601](https://cve.now/CVE-2011-4601.md): family\_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message (no CVSS)
- [CVE-2011-4862](https://cve.now/CVE-2011-4862.md): Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and (no CVSS)
- [CVE-2011-5001](https://cve.now/CVE-2011-5001.md): Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micr (no CVSS)
- [CVE-2011-5002](https://cve.now/CVE-2011-5002.md): Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file (no CVSS)
- [CVE-2011-5003](https://cve.now/CVE-2011-5003.md): Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attacke (no CVSS)
- [CVE-2011-5004](https://cve.now/CVE-2011-5004.md): Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com\_fabrik) component before 2.1.1 for Joomla! allows remote a (no CVSS)
- [CVE-2011-5005](https://cve.now/CVE-2011-5005.md): Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file w (no CVSS)
- [CVE-2011-5006](https://cve.now/CVE-2011-5006.md): Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file. (no CVSS)
- [CVE-2011-5007](https://cve.now/CVE-2011-5007.md): Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possib (no CVSS)
- [CVE-2011-5008](https://cve.now/CVE-2011-5008.md): Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large (no CVSS)
- [CVE-2011-5009](https://cve.now/CVE-2011-5009.md): The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL (no CVSS)
- [CVE-2011-5010](https://cve.now/CVE-2011-5010.md): apps/a3/cfg\_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters i (no CVSS)
- [CVE-2011-5011](https://cve.now/CVE-2011-5011.md): Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack (no CVSS)
- [CVE-2011-5012](https://cve.now/CVE-2011-5012.md): Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflectio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.