# CVEs published 2012-05-09

42 CVEs were published on May 9, 2012: 0 critical, 1 high. Days are UTC.

- [CVE-2011-4031](https://cve.now/CVE-2011-4031.md): Integer underflow in the asfrtp\_parse\_packet function in libavformat/rtpdec\_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute (no CVSS)
- [CVE-2012-0684](https://cve.now/CVE-2012-0684.md): Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD (no CVSS)
- [CVE-2012-0685](https://cve.now/CVE-2012-0685.md): Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD (no CVSS)
- [CVE-2012-1977](https://cve.now/CVE-2012-1977.md): WellinTech KingSCADA Missing Encryption of Sensitive Data (no CVSS, WellinTech KingSCADA)
- [CVE-2012-2007](https://cve.now/CVE-2012-2007.md): SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to execute ar (no CVSS)
- [CVE-2012-2008](https://cve.now/CVE-2012-2008.md): Cross-site scripting (XSS) vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers (no CVSS)
- [CVE-2012-2009](https://cve.now/CVE-2012-2009.md): Unspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to ga (no CVSS)
- [CVE-2012-0778](https://cve.now/CVE-2012-0778.md): Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2012-0780](https://cve.now/CVE-2012-0780.md): Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec (no CVSS)
- [CVE-2012-2023](https://cve.now/CVE-2012-2023.md): Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec (no CVSS)
- [CVE-2012-2024](https://cve.now/CVE-2012-2024.md): Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec (no CVSS)
- [CVE-2012-2025](https://cve.now/CVE-2012-2025.md): Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec (no CVSS)
- [CVE-2012-2026](https://cve.now/CVE-2012-2026.md): Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec (no CVSS)
- [CVE-2012-2027](https://cve.now/CVE-2012-2027.md): Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arb (no CVSS)
- [CVE-2012-2028](https://cve.now/CVE-2012-2028.md): Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2012-2029](https://cve.now/CVE-2012-2029.md): Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2030](https://cve.now/CVE-2012-2030.md): Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2031](https://cve.now/CVE-2012-2031.md): Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2032](https://cve.now/CVE-2012-2032.md): Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2033](https://cve.now/CVE-2012-2033.md): Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-0018](https://cve.now/CVE-2012-0018.md): Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbi (no CVSS)
- [CVE-2012-0141](https://cve.now/CVE-2012-0141.md): Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and (no CVSS)
- [CVE-2012-0142](https://cve.now/CVE-2012-0142.md): Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and (no CVSS)
- [CVE-2012-0143](https://cve.now/CVE-2012-0143.md): Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to (no CVSS)
- [CVE-2012-0159](https://cve.now/CVE-2012-0159.md): Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP (no CVSS)
- [CVE-2012-0160](https://cve.now/CVE-2012-0160.md): Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remo (no CVSS)
- [CVE-2012-0161](https://cve.now/CVE-2012-0161.md): Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during (no CVSS)
- [CVE-2012-0162](https://cve.now/CVE-2012-0162.md): Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAM (no CVSS)
- [CVE-2012-0164](https://cve.now/CVE-2012-0164.md): Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application h (no CVSS)
- [CVE-2012-0165](https://cve.now/CVE-2012-0165.md): GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly valid (no CVSS)
- [CVE-2012-0167](https://cve.now/CVE-2012-0167.md): Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute a (no CVSS)
- [CVE-2012-0174](https://cve.now/CVE-2012-0174.md): Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not p (no CVSS)
- [CVE-2012-0176](https://cve.now/CVE-2012-0176.md): Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vecto (no CVSS)
- [CVE-2012-0178](https://cve.now/CVE-2012-0178.md): Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Wind (no CVSS)
- [CVE-2012-0179](https://cve.now/CVE-2012-0179.md): Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain (no CVSS)
- [CVE-2012-0180](https://cve.now/CVE-2012-0180.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (CVSS 7.8)
- [CVE-2012-0181](https://cve.now/CVE-2012-0181.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2012-0183](https://cve.now/CVE-2012-0183.md): Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers (no CVSS)
- [CVE-2012-0184](https://cve.now/CVE-2012-0184.md): Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack (no CVSS)
- [CVE-2012-0185](https://cve.now/CVE-2012-0185.md): Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP (no CVSS)
- [CVE-2012-1847](https://cve.now/CVE-2012-1847.md): Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack (no CVSS)
- [CVE-2012-1848](https://cve.now/CVE-2012-1848.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.