# CVEs published 2012-01-10

14 CVEs were published on January 10, 2012: 0 critical, 1 high. Days are UTC.

- [CVE-2011-5058](https://cve.now/CVE-2011-5058.md): The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories und (no CVSS)
- [CVE-2011-5059](https://cve.now/CVE-2011-5059.md): Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, (no CVSS)
- [CVE-2011-4370](https://cve.now/CVE-2011-4370.md): Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2011-4371](https://cve.now/CVE-2011-4371.md): Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2011-4372](https://cve.now/CVE-2011-4372.md): Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2011-4373](https://cve.now/CVE-2011-4373.md): Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2012-0001](https://cve.now/CVE-2012-0001.md): The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 G (no CVSS)
- [CVE-2012-0003](https://cve.now/CVE-2012-0003.md): Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Serv (CVSS 8.1)
- [CVE-2012-0004](https://cve.now/CVE-2012-0004.md): Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows (no CVSS)
- [CVE-2012-0005](https://cve.now/CVE-2012-0005.md): The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and (no CVSS)
- [CVE-2012-0007](https://cve.now/CVE-2012-0007.md): The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascadi (no CVSS)
- [CVE-2012-0009](https://cve.now/CVE-2012-0009.md): Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 all (no CVSS)
- [CVE-2012-0013](https://cve.now/CVE-2012-0013.md): Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo (no CVSS)
- [CVE-2011-4785](https://cve.now/CVE-2011-4785.md): Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.