# CVEs published 2012-06-07

17 CVEs were published on June 7, 2012: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2012-0507](https://cve.now/CVE-2012-0507.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, (CVSS 9.8, KEV)
- [CVE-2012-0948](https://cve.now/CVE-2012-0948.md): DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone\_sys (no CVSS)
- [CVE-2012-3291](https://cve.now/CVE-2012-3291.md): Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner. (no CVSS)
- [CVE-2012-3292](https://cve.now/CVE-2012-3292.md): The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the (no CVSS)
- [CVE-2011-1761](https://cve.now/CVE-2011-1761.md): Multiple stack-based buffer overflows in the (1) abc\_new\_macro and (2) abc\_new\_umacro functions in src/load\_abc.cpp in libmodplug before 0.8 (no CVSS)
- [CVE-2011-2911](https://cve.now/CVE-2011-2911.md): Integer overflow in the CSoundFile::ReadWav function in src/load\_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a den (no CVSS)
- [CVE-2011-2912](https://cve.now/CVE-2011-2912.md): Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load\_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to (no CVSS)
- [CVE-2011-2913](https://cve.now/CVE-2011-2913.md): Off-by-one error in the CSoundFile::ReadAMS function in src/load\_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a den (no CVSS)
- [CVE-2011-2914](https://cve.now/CVE-2011-2914.md): Off-by-one error in the CSoundFile::ReadDSM function in src/load\_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a den (no CVSS)
- [CVE-2011-2915](https://cve.now/CVE-2011-2915.md): Off-by-one error in the CSoundFile::ReadAMS2 function in src/load\_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a de (no CVSS)
- [CVE-2012-0985](https://cve.now/CVE-2012-0985.md): Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wirel (no CVSS)
- [CVE-2012-1012](https://cve.now/CVE-2012-1012.md): server/server\_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict acces (no CVSS)
- [CVE-2012-1013](https://cve.now/CVE-2012-1013.md): The check\_1\_6\_dummy function in lib/kadm5/srv/svr\_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 (no CVSS)
- [CVE-2012-2101](https://cve.now/CVE-2012-2101.md): Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated use (no CVSS, nova)
- [CVE-2012-2667](https://cve.now/CVE-2012-2667.md): Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hija (no CVSS)
- [CVE-2012-2762](https://cve.now/CVE-2012-2762.md): SQL injection vulnerability in include/functions\_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2012-3290](https://cve.now/CVE-2012-3290.md): Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and C (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.