# CVEs published 2012-10-10

40 CVEs were published on October 10, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2286](https://cve.now/CVE-2012-2286.md): Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensi (no CVSS)
- [CVE-2012-4467](https://cve.now/CVE-2012-4467.md): The (1) do\_siocgstamp and (2) do\_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order, wh (no CVSS)
- [CVE-2012-5166](https://cve.now/CVE-2012-5166.md): ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attac (no CVSS)
- [CVE-2009-5067](https://cve.now/CVE-2009-5067.md): Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2012-3040](https://cve.now/CVE-2012-3040.md): Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inje (no CVSS)
- [CVE-2012-3504](https://cve.now/CVE-2012-3504.md): The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on th (no CVSS)
- [CVE-2012-4430](https://cve.now/CVE-2012-4430.md): The dump\_resource function in dird/dird\_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticate (no CVSS)
- [CVE-2012-4445](https://cve.now/CVE-2012-4445.md): Heap-based buffer overflow in the eap\_server\_tls\_process\_fragment function in eap\_server\_tls\_common.c in the EAP authentication server in ho (no CVSS)
- [CVE-2012-4454](https://cve.now/CVE-2012-4454.md): openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a sym (no CVSS)
- [CVE-2012-4455](https://cve.now/CVE-2012-4455.md): openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..op (no CVSS)
- [CVE-2012-4463](https://cve.now/CVE-2012-4463.md): Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC\_EXT\_SELECTED or (2) MC\_EXT\_ONLYTAGGED environment variables when multiple (no CVSS)
- [CVE-2012-4465](https://cve.now/CVE-2012-4465.md): Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a deni (no CVSS)
- [CVE-2012-4899](https://cve.now/CVE-2012-4899.md): WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials (no CVSS)
- [CVE-2012-5355](https://cve.now/CVE-2012-5355.md): welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with (no CVSS)
- [CVE-2012-5356](https://cve.now/CVE-2012-5356.md): The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x b (no CVSS)
- [CVE-2012-3982](https://cve.now/CVE-2012-3982.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird befor (no CVSS)
- [CVE-2012-3983](https://cve.now/CVE-2012-3983.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.1 (no CVSS)
- [CVE-2012-3984](https://cve.now/CVE-2012-3984.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that (no CVSS)
- [CVE-2012-3985](https://cve.now/CVE-2012-3985.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, whic (no CVSS)
- [CVE-2012-3986](https://cve.now/CVE-2012-3986.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey befo (no CVSS)
- [CVE-2012-3987](https://cve.now/CVE-2012-3987.md): Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote attackers to bypass (no CVSS)
- [CVE-2012-3988](https://cve.now/CVE-2012-3988.md): Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x b (no CVSS)
- [CVE-2012-3989](https://cve.now/CVE-2012-3989.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable du (no CVSS)
- [CVE-2012-3990](https://cve.now/CVE-2012-3990.md): Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunder (no CVSS)
- [CVE-2012-3991](https://cve.now/CVE-2012-3991.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey befo (no CVSS)
- [CVE-2012-3992](https://cve.now/CVE-2012-3992.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey befo (no CVSS)
- [CVE-2012-3993](https://cve.now/CVE-2012-3993.md): The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thun (no CVSS)
- [CVE-2012-3994](https://cve.now/CVE-2012-3994.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey befo (no CVSS)
- [CVE-2012-3995](https://cve.now/CVE-2012-3995.md): The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR (no CVSS)
- [CVE-2012-4179](https://cve.now/CVE-2012-4179.md): Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10 (no CVSS)
- [CVE-2012-4180](https://cve.now/CVE-2012-4180.md): Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before (no CVSS)
- [CVE-2012-4181](https://cve.now/CVE-2012-4181.md): Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10. (no CVSS)
- [CVE-2012-4182](https://cve.now/CVE-2012-4182.md): Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thu (no CVSS)
- [CVE-2012-4183](https://cve.now/CVE-2012-4183.md): Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8 (no CVSS)
- [CVE-2012-4184](https://cve.now/CVE-2012-4184.md): The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thun (no CVSS)
- [CVE-2012-4185](https://cve.now/CVE-2012-4185.md): Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0 (no CVSS)
- [CVE-2012-4186](https://cve.now/CVE-2012-4186.md): Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thu (no CVSS)
- [CVE-2012-4187](https://cve.now/CVE-2012-4187.md): Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey befo (no CVSS)
- [CVE-2012-4188](https://cve.now/CVE-2012-4188.md): Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16 (no CVSS)
- [CVE-2012-5354](https://cve.now/CVE-2012-5354.md): Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-10-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.