# CVEs published 2012-05-11

19 CVEs were published on May 11, 2012: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2012-1823](https://cve.now/CVE-2012-1823.md): sapi/cgi/cgi\_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que (CVSS 9.8, KEV)
- [CVE-2012-2311](https://cve.now/CVE-2012-2311.md): sapi/cgi/cgi\_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle que (no CVSS)
- [CVE-2012-2329](https://cve.now/CVE-2012-2329.md): Buffer overflow in the apache\_request\_headers function in sapi/cgi/cgi\_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a d (no CVSS)
- [CVE-2012-2335](https://cve.now/CVE-2012-2335.md): php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3. (no CVSS)
- [CVE-2012-2336](https://cve.now/CVE-2012-2336.md): sapi/cgi/cgi\_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle que (no CVSS)
- [CVE-2012-0649](https://cve.now/CVE-2012-0649.md): Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via (no CVSS)
- [CVE-2012-0651](https://cve.now/CVE-2012-0651.md): The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memo (no CVSS)
- [CVE-2012-0652](https://cve.now/CVE-2012-0652.md): Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not properly restrict what is (no CVSS)
- [CVE-2012-0654](https://cve.now/CVE-2012-0654.md): libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allow (no CVSS)
- [CVE-2012-0655](https://cve.now/CVE-2012-0655.md): libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easi (no CVSS)
- [CVE-2012-0656](https://cve.now/CVE-2012-0656.md): Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate at (no CVSS)
- [CVE-2012-0657](https://cve.now/CVE-2012-0657.md): Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to by (no CVSS)
- [CVE-2012-0658](https://cve.now/CVE-2012-0658.md): Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2012-0659](https://cve.now/CVE-2012-0659.md): Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2012-0660](https://cve.now/CVE-2012-0660.md): Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2012-0661](https://cve.now/CVE-2012-0661.md): Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-0662](https://cve.now/CVE-2012-0662.md): Integer overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a deni (no CVSS)
- [CVE-2012-0675](https://cve.now/CVE-2012-0675.md): Time Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based authentication after this authentication method is (no CVSS)
- [CVE-2012-0676](https://cve.now/CVE-2012-0676.md): WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.