# CVEs published 2012-07-25

113 CVEs were published on July 25, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2152](https://cve.now/CVE-2012-2152.md): Stack-based buffer overflow in the get\_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service (crash (no CVSS)
- [CVE-2012-2296](https://cve.now/CVE-2012-2296.md): The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. (no CVSS)
- [CVE-2012-2302](https://cve.now/CVE-2012-2302.md): Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows (no CVSS)
- [CVE-2012-2305](https://cve.now/CVE-2012-2305.md): Cross-site request forgery (CSRF) vulnerability in the Node Gallery module for Drupal 6.x-3.1 and earlier allows remote attackers to hijack (no CVSS)
- [CVE-2012-2306](https://cve.now/CVE-2012-2306.md): SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2012-2307](https://cve.now/CVE-2012-2307.md): Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack t (no CVSS)
- [CVE-2012-2308](https://cve.now/CVE-2012-2308.md): Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated us (no CVSS)
- [CVE-2012-2309](https://cve.now/CVE-2012-2309.md): Cross-site scripting (XSS) vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authent (no CVSS)
- [CVE-2012-2310](https://cve.now/CVE-2012-2310.md): Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote a (no CVSS)
- [CVE-2012-2442](https://cve.now/CVE-2012-2442.md): Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial of service via a cra (no CVSS)
- [CVE-2012-4054](https://cve.now/CVE-2012-4054.md): Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrar (no CVSS)
- [CVE-2012-4055](https://cve.now/CVE-2012-4055.md): SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter. (no CVSS)
- [CVE-2012-4056](https://cve.now/CVE-2012-4056.md): SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parame (no CVSS)
- [CVE-2012-4057](https://cve.now/CVE-2012-4057.md): Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted flm file. (no CVSS)
- [CVE-2012-4058](https://cve.now/CVE-2012-4058.md): Cross-site scripting (XSS) vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subj (no CVSS)
- [CVE-2012-4059](https://cve.now/CVE-2012-4059.md): Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authenti (no CVSS)
- [CVE-2012-4060](https://cve.now/CVE-2012-4060.md): Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2012-4061](https://cve.now/CVE-2012-4061.md): Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter (no CVSS)
- [CVE-2012-0682](https://cve.now/CVE-2012-0682.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-0683](https://cve.now/CVE-2012-0683.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-1520](https://cve.now/CVE-2012-1520.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3589](https://cve.now/CVE-2012-3589.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3590](https://cve.now/CVE-2012-3590.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3591](https://cve.now/CVE-2012-3591.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3592](https://cve.now/CVE-2012-3592.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3593](https://cve.now/CVE-2012-3593.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3594](https://cve.now/CVE-2012-3594.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3595](https://cve.now/CVE-2012-3595.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3596](https://cve.now/CVE-2012-3596.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3597](https://cve.now/CVE-2012-3597.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3599](https://cve.now/CVE-2012-3599.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3600](https://cve.now/CVE-2012-3600.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3603](https://cve.now/CVE-2012-3603.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3604](https://cve.now/CVE-2012-3604.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3605](https://cve.now/CVE-2012-3605.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3608](https://cve.now/CVE-2012-3608.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3609](https://cve.now/CVE-2012-3609.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3610](https://cve.now/CVE-2012-3610.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3611](https://cve.now/CVE-2012-3611.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3615](https://cve.now/CVE-2012-3615.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3618](https://cve.now/CVE-2012-3618.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3620](https://cve.now/CVE-2012-3620.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3625](https://cve.now/CVE-2012-3625.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3626](https://cve.now/CVE-2012-3626.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3627](https://cve.now/CVE-2012-3627.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3628](https://cve.now/CVE-2012-3628.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3629](https://cve.now/CVE-2012-3629.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3630](https://cve.now/CVE-2012-3630.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3631](https://cve.now/CVE-2012-3631.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3633](https://cve.now/CVE-2012-3633.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3634](https://cve.now/CVE-2012-3634.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3635](https://cve.now/CVE-2012-3635.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3636](https://cve.now/CVE-2012-3636.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3637](https://cve.now/CVE-2012-3637.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3638](https://cve.now/CVE-2012-3638.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3639](https://cve.now/CVE-2012-3639.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3640](https://cve.now/CVE-2012-3640.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3641](https://cve.now/CVE-2012-3641.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3642](https://cve.now/CVE-2012-3642.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3644](https://cve.now/CVE-2012-3644.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3645](https://cve.now/CVE-2012-3645.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3646](https://cve.now/CVE-2012-3646.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3653](https://cve.now/CVE-2012-3653.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3655](https://cve.now/CVE-2012-3655.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3656](https://cve.now/CVE-2012-3656.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3661](https://cve.now/CVE-2012-3661.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3663](https://cve.now/CVE-2012-3663.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3664](https://cve.now/CVE-2012-3664.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3665](https://cve.now/CVE-2012-3665.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3666](https://cve.now/CVE-2012-3666.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3667](https://cve.now/CVE-2012-3667.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3668](https://cve.now/CVE-2012-3668.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3669](https://cve.now/CVE-2012-3669.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3670](https://cve.now/CVE-2012-3670.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3674](https://cve.now/CVE-2012-3674.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3678](https://cve.now/CVE-2012-3678.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3679](https://cve.now/CVE-2012-3679.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3680](https://cve.now/CVE-2012-3680.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3681](https://cve.now/CVE-2012-3681.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3682](https://cve.now/CVE-2012-3682.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3683](https://cve.now/CVE-2012-3683.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2012-3686](https://cve.now/CVE-2012-3686.md): WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS)
- [CVE-2005-4895](https://cve.now/CVE-2005-4895.md): Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memo (no CVSS)
- [CVE-2006-7252](https://cve.now/CVE-2006-7252.md): Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD makes it easier for context-d (no CVSS)
- [CVE-2007-6754](https://cve.now/CVE-2007-6754.md): The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate memory, which makes i (no CVSS)
- [CVE-2012-0678](https://cve.now/CVE-2012-0678.md): Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a fee (no CVSS)
- [CVE-2012-0679](https://cve.now/CVE-2012-0679.md): Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL. (no CVSS)
- [CVE-2012-0680](https://cve.now/CVE-2012-0680.md): Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to by (no CVSS)
- [CVE-2012-2673](https://cve.now/CVE-2012-2673.md): Multiple integer overflows in the (1) GC\_generic\_malloc and (2) calloc functions in malloc.c, and the (3) GC\_generic\_malloc\_ignore\_off\_page (no CVSS)
- [CVE-2012-2674](https://cve.now/CVE-2012-2674.md): Multiple integer overflows in the (1) chk\_malloc, (2) leak\_malloc, and (3) leak\_memalign functions in libc/bionic/malloc\_debug\_leak.c in Bio (no CVSS)
- [CVE-2012-2675](https://cve.now/CVE-2012-2675.md): Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 (no CVSS)
- [CVE-2012-2676](https://cve.now/CVE-2012-2676.md): Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-dependent attackers to (no CVSS)
- [CVE-2012-2677](https://cve.now/CVE-2012-2677.md): Integer overflow in the ordered\_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attack (no CVSS)
- [CVE-2012-2760](https://cve.now/CVE-2012-2760.md): mod\_auth\_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod\_auth\_openid.db, which allows local users to obtain sessio (no CVSS)
- [CVE-2012-3650](https://cve.now/CVE-2012-3650.md): WebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of SVG images, which allows remote attackers (no CVSS)
- [CVE-2012-3689](https://cve.now/CVE-2012-3689.md): WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the S (no CVSS)
- [CVE-2012-3690](https://cve.now/CVE-2012-3690.md): WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitra (no CVSS)
- [CVE-2012-3691](https://cve.now/CVE-2012-3691.md): WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows remote attackers to by (no CVSS)
- [CVE-2012-3693](https://cve.now/CVE-2012-3693.md): Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly (no CVSS)
- [CVE-2012-3694](https://cve.now/CVE-2012-3694.md): WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sensi (no CVSS)
- [CVE-2012-3695](https://cve.now/CVE-2012-3695.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2012-3696](https://cve.now/CVE-2012-3696.md): CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP (no CVSS)
- [CVE-2012-3697](https://cve.now/CVE-2012-3697.md): WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restrictions (no CVSS)
- [CVE-2012-4053](https://cve.now/CVE-2012-4053.md): Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the aut (no CVSS)
- [CVE-2012-2194](https://cve.now/CVE-2012-2194.md): Directory traversal vulnerability in the SQLJ.DB2\_INSTALL\_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, (no CVSS)
- [CVE-2012-2196](https://cve.now/CVE-2012-2196.md): IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via (no CVSS)
- [CVE-2012-2197](https://cve.now/CVE-2012-2197.md): Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 th (no CVSS)
- [CVE-2012-2646](https://cve.now/CVE-2012-2646.md): The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implemen (no CVSS)
- [CVE-2012-3570](https://cve.now/CVE-2012-3570.md): Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmen (no CVSS)
- [CVE-2012-3571](https://cve.now/CVE-2012-3571.md): ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consu (no CVSS)
- [CVE-2012-3817](https://cve.now/CVE-2012-3817.md): ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, whe (no CVSS)
- [CVE-2012-3868](https://cve.now/CVE-2012-3868.md): Race condition in the ns\_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2012-3954](https://cve.now/CVE-2012-3954.md): Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-07-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.