# CVEs published 2012-08-25

55 CVEs were published on August 25, 2012: 0 critical, 3 high. Days are UTC.

- [CVE-2010-5150](https://cve.now/CVE-2010-5150.md): Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dan (no CVSS)
- [CVE-2010-5151](https://cve.now/CVE-2010-5151.md): Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangero (no CVSS)
- [CVE-2010-5152](https://cve.now/CVE-2010-5152.md): Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous (no CVSS)
- [CVE-2010-5153](https://cve.now/CVE-2010-5153.md): Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute (CVSS 5.3)
- [CVE-2010-5154](https://cve.now/CVE-2010-5154.md): Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and exec (no CVSS)
- [CVE-2010-5155](https://cve.now/CVE-2010-5155.md): Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code (no CVSS)
- [CVE-2010-5156](https://cve.now/CVE-2010-5156.md): Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and e (no CVSS)
- [CVE-2010-5157](https://cve.now/CVE-2010-5157.md): Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and e (no CVSS)
- [CVE-2010-5158](https://cve.now/CVE-2010-5158.md): Race condition in DefenseWall Personal Firewall 3.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dange (no CVSS)
- [CVE-2010-5159](https://cve.now/CVE-2010-5159.md): Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute da (CVSS 7.0)
- [CVE-2010-5160](https://cve.now/CVE-2010-5160.md): Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous c (CVSS 4.5)
- [CVE-2010-5161](https://cve.now/CVE-2010-5161.md): Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and (no CVSS)
- [CVE-2010-5162](https://cve.now/CVE-2010-5162.md): Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code tha (no CVSS)
- [CVE-2010-5163](https://cve.now/CVE-2010-5163.md): Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execu (no CVSS)
- [CVE-2010-5164](https://cve.now/CVE-2010-5164.md): Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and (CVSS 5.3)
- [CVE-2010-5165](https://cve.now/CVE-2010-5165.md): Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code th (no CVSS)
- [CVE-2010-5166](https://cve.now/CVE-2010-5166.md): Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute da (no CVSS)
- [CVE-2010-5167](https://cve.now/CVE-2010-5167.md): Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous (no CVSS)
- [CVE-2010-5168](https://cve.now/CVE-2010-5168.md): Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, an (no CVSS)
- [CVE-2010-5169](https://cve.now/CVE-2010-5169.md): Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous (CVSS 7.0)
- [CVE-2010-5170](https://cve.now/CVE-2010-5170.md): Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and exec (no CVSS)
- [CVE-2010-5171](https://cve.now/CVE-2010-5171.md): Race condition in Outpost Security Suite Pro 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP allows local users to bypass kerne (no CVSS)
- [CVE-2010-5172](https://cve.now/CVE-2010-5172.md): Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute da (no CVSS)
- [CVE-2010-5173](https://cve.now/CVE-2010-5173.md): Race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerou (no CVSS)
- [CVE-2010-5174](https://cve.now/CVE-2010-5174.md): Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that woul (no CVSS)
- [CVE-2010-5175](https://cve.now/CVE-2010-5175.md): Race condition in PrivateFirewall 7.0.20.37 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code (CVSS 4.8)
- [CVE-2010-5176](https://cve.now/CVE-2010-5176.md): Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangero (no CVSS)
- [CVE-2010-5177](https://cve.now/CVE-2010-5177.md): Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows local users to bypass kernel-mode hook handlers, and execu (no CVSS)
- [CVE-2010-5178](https://cve.now/CVE-2010-5178.md): Race condition in ThreatFire 4.7.0.17 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that (no CVSS)
- [CVE-2010-5179](https://cve.now/CVE-2010-5179.md): Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handler (no CVSS)
- [CVE-2010-5180](https://cve.now/CVE-2010-5180.md): Race condition in VBA32 Personal 3.12.12.4 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code (no CVSS)
- [CVE-2010-5181](https://cve.now/CVE-2010-5181.md): Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangero (CVSS 7.0)
- [CVE-2010-5182](https://cve.now/CVE-2010-5182.md): Race condition in VirusBuster Internet Security Suite 3.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute (no CVSS)
- [CVE-2010-5183](https://cve.now/CVE-2010-5183.md): Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and e (no CVSS)
- [CVE-2010-5184](https://cve.now/CVE-2010-5184.md): Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute d (no CVSS)
- [CVE-2012-3525](https://cve.now/CVE-2012-3525.md): s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote X (no CVSS)
- [CVE-2012-4669](https://cve.now/CVE-2012-4669.md): M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which a (no CVSS)
- [CVE-2012-4670](https://cve.now/CVE-2012-4670.md): Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP serve (no CVSS)
- [CVE-2012-4671](https://cve.now/CVE-2012-4671.md): psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spo (no CVSS)
- [CVE-2012-4672](https://cve.now/CVE-2012-4672.md): Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof d (no CVSS)
- [CVE-2012-0048](https://cve.now/CVE-2012-0048.md): OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing (no CVSS)
- [CVE-2012-3402](https://cve.now/CVE-2012-3402.md): Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a de (no CVSS)
- [CVE-2012-3403](https://cve.now/CVE-2012-3403.md): Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2012-3416](https://cve.now/CVE-2012-3416.md): Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW\_ADMINISTRATOR or ALLOW\_WRI (no CVSS)
- [CVE-2012-3441](https://cve.now/CVE-2012-3441.md): The database creation script (module/idoutils/db/scripts/create\_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga use (no CVSS)
- [CVE-2012-3479](https://cve.now/CVE-2012-3479.md): lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variabl (no CVSS)
- [CVE-2012-3480](https://cve.now/CVE-2012-3480.md): Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod\_l, and other unspecified "related functions" in stdlib in (no CVSS)
- [CVE-2012-3481](https://cve.now/CVE-2012-3481.md): Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allo (no CVSS)
- [CVE-2012-3501](https://cve.now/CVE-2012-3501.md): The squidclamav\_check\_preview\_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to (no CVSS)
- [CVE-2012-3503](https://cve.now/CVE-2012-3503.md): The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret\_token value, which causes each d (no CVSS, katello)
- [CVE-2012-3507](https://cve.now/CVE-2012-3507.md): Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows (no CVSS)
- [CVE-2012-3508](https://cve.now/CVE-2012-3508.md): Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2012-3514](https://cve.now/CVE-2012-3514.md): OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allow (no CVSS)
- [CVE-2012-4667](https://cve.now/CVE-2012-4667.md): Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2012-4668](https://cve.now/CVE-2012-4668.md): Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HT (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.