# CVEs published 2013-01-05

4 CVEs were published on January 5, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3937](https://cve.now/CVE-2011-3937.md): The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Liba (no CVSS)
- [CVE-2012-2378](https://cve.now/CVE-2012-2378.md): Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy (no CVSS, org.apache.cxf:cxf)
- [CVE-2012-4549](https://cve.now/CVE-2012-4549.md): Jboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization (CVSS 6.5, Red Hat JBoss Enterprise Application Platform)
- [CVE-2012-4550](https://cve.now/CVE-2012-4550.md): Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass (CVSS 5.3, Red Hat JBoss Enterprise Application Platform)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.