# CVEs published 2012-02-02

34 CVEs were published on February 2, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3444](https://cve.now/CVE-2011-3444.md): Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which all (no CVSS)
- [CVE-2011-3446](https://cve.now/CVE-2011-3446.md): Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers (no CVSS)
- [CVE-2011-3447](https://cve.now/CVE-2011-3447.md): CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote att (no CVSS)
- [CVE-2011-3448](https://cve.now/CVE-2011-3448.md): Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2011-3449](https://cve.now/CVE-2011-3449.md): Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2011-3450](https://cve.now/CVE-2011-3450.md): CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to ex (no CVSS)
- [CVE-2011-3452](https://cve.now/CVE-2011-3452.md): Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote atta (no CVSS)
- [CVE-2011-3453](https://cve.now/CVE-2011-3453.md): Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2011-3457](https://cve.now/CVE-2011-3457.md): The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which al (no CVSS)
- [CVE-2011-3458](https://cve.now/CVE-2011-3458.md): QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execut (no CVSS)
- [CVE-2011-3459](https://cve.now/CVE-2011-3459.md): Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2011-3460](https://cve.now/CVE-2011-3460.md): Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2011-3462](https://cve.now/CVE-2011-3462.md): Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows re (no CVSS)
- [CVE-2011-3463](https://cve.now/CVE-2011-3463.md): WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local users to gain privileges (no CVSS)
- [CVE-2012-0440](https://cve.now/CVE-2012-0440.md): Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4 (no CVSS)
- [CVE-2012-0448](https://cve.now/CVE-2012-0448.md): Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 does not r (no CVSS)
- [CVE-2010-4562](https://cve.now/CVE-2010-4562.md): Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the n (no CVSS)
- [CVE-2010-4563](https://cve.now/CVE-2010-4563.md): The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Req (no CVSS)
- [CVE-2011-2393](https://cve.now/CVE-2011-2393.md): The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems all (no CVSS)
- [CVE-2012-0975](https://cve.now/CVE-2012-0975.md): Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arb (no CVSS)
- [CVE-2012-0976](https://cve.now/CVE-2012-0976.md): Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors priv (no CVSS)
- [CVE-2012-0977](https://cve.now/CVE-2012-0977.md): Stack-based buffer overflow in jp2\_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers (no CVSS)
- [CVE-2012-0978](https://cve.now/CVE-2012-0978.md): Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers (no CVSS)
- [CVE-2012-0979](https://cve.now/CVE-2012-0979.md): Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field (no CVSS)
- [CVE-2012-0980](https://cve.now/CVE-2012-0980.md): SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file (no CVSS)
- [CVE-2012-0981](https://cve.now/CVE-2012-0981.md): Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. (no CVSS)
- [CVE-2012-0982](https://cve.now/CVE-2012-0982.md): SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitr (no CVSS)
- [CVE-2012-0983](https://cve.now/CVE-2012-0983.md): SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a vi (no CVSS)
- [CVE-2011-1573](https://cve.now/CVE-2011-1573.md): net/sctp/sm\_make\_chunk.c in the Linux kernel before 2.6.34, when addip\_enable and auth\_enable are used, does not consider the amount of zero (no CVSS)
- [CVE-2011-2525](https://cve.now/CVE-2011-2525.md): The qdisc\_notify function in net/sched/sch\_api.c in the Linux kernel before 2.6.35 does not prevent tc\_fill\_qdisc function calls referencing (no CVSS)
- [CVE-2011-4144](https://cve.now/CVE-2011-4144.md): Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local (no CVSS)
- [CVE-2011-4194](https://cve.now/CVE-2011-4194.md): Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote attackers to execute ar (no CVSS)
- [CVE-2011-4790](https://cve.now/CVE-2011-4790.md): Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown v (no CVSS)
- [CVE-2012-0057](https://cve.now/CVE-2012-0057.md): PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT styleshe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-02-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.