# CVEs published 2013-02-13

79 CVEs were published on February 13, 2013: 2 critical, 5 high. Days are UTC.

- [CVE-2013-1100](https://cve.now/CVE-2013-1100.md): The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denia (no CVSS)
- [CVE-2013-1111](https://cve.now/CVE-2013-1111.md): The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, w (no CVSS)
- [CVE-2013-1114](https://cve.now/CVE-2013-1114.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2013-1122](https://cve.now/CVE-2013-1122.md): Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause (no CVSS)
- [CVE-2013-1131](https://cve.now/CVE-2013-1131.md): Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or poss (no CVSS)
- [CVE-2012-3280](https://cve.now/CVE-2012-3280.md): Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, (no CVSS)
- [CVE-2013-0635](https://cve.now/CVE-2013-0635.md): Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2013-0636](https://cve.now/CVE-2013-0636.md): Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2012-3363](https://cve.now/CVE-2012-3363.md): Zend\_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows re (CVSS 9.1, zendframework/zendframework1)
- [CVE-2012-6531](https://cve.now/CVE-2012-6531.md): (1) Zend\_Dom, (2) Zend\_Feed, and (3) Zend\_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXM (no CVSS, zendframework/zendframework1)
- [CVE-2012-6532](https://cve.now/CVE-2012-6532.md): (1) Zend\_Dom, (2) Zend\_Feed, (3) Zend\_Soap, and (4) Zend\_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote a (no CVSS, zendframework/zendframework1)
- [CVE-2013-0208](https://cve.now/CVE-2013-0208.md): The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boo (no CVSS)
- [CVE-2013-0015](https://cve.now/CVE-2013-0015.md): Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to (no CVSS)
- [CVE-2013-0018](https://cve.now/CVE-2013-0018.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web (no CVSS)
- [CVE-2013-0019](https://cve.now/CVE-2013-0019.md): Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS)
- [CVE-2013-0020](https://cve.now/CVE-2013-0020.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that (no CVSS)
- [CVE-2013-0021](https://cve.now/CVE-2013-0021.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS)
- [CVE-2013-0022](https://cve.now/CVE-2013-0022.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that (CVSS 9.0)
- [CVE-2013-0023](https://cve.now/CVE-2013-0023.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web sit (no CVSS)
- [CVE-2013-0024](https://cve.now/CVE-2013-0024.md): Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site (no CVSS)
- [CVE-2013-0025](https://cve.now/CVE-2013-0025.md): Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that (no CVSS)
- [CVE-2013-0026](https://cve.now/CVE-2013-0026.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that (no CVSS)
- [CVE-2013-0027](https://cve.now/CVE-2013-0027.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS)
- [CVE-2013-0028](https://cve.now/CVE-2013-0028.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web (no CVSS)
- [CVE-2013-0029](https://cve.now/CVE-2013-0029.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web (CVSS 7.5)
- [CVE-2013-0030](https://cve.now/CVE-2013-0030.md): The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows (no CVSS)
- [CVE-2013-0073](https://cve.now/CVE-2013-0073.md): The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privil (no CVSS)
- [CVE-2013-0075](https://cve.now/CVE-2013-0075.md): The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Window (no CVSS)
- [CVE-2013-0076](https://cve.now/CVE-2013-0076.md): The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly han (no CVSS)
- [CVE-2013-0077](https://cve.now/CVE-2013-0077.md): Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to exe (no CVSS)
- [CVE-2013-1248](https://cve.now/CVE-2013-1248.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1249](https://cve.now/CVE-2013-1249.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1250](https://cve.now/CVE-2013-1250.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1251](https://cve.now/CVE-2013-1251.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1252](https://cve.now/CVE-2013-1252.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1253](https://cve.now/CVE-2013-1253.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (CVSS 7.0)
- [CVE-2013-1254](https://cve.now/CVE-2013-1254.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1255](https://cve.now/CVE-2013-1255.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1256](https://cve.now/CVE-2013-1256.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1257](https://cve.now/CVE-2013-1257.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1258](https://cve.now/CVE-2013-1258.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1259](https://cve.now/CVE-2013-1259.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1260](https://cve.now/CVE-2013-1260.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1261](https://cve.now/CVE-2013-1261.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1262](https://cve.now/CVE-2013-1262.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1263](https://cve.now/CVE-2013-1263.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1264](https://cve.now/CVE-2013-1264.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1265](https://cve.now/CVE-2013-1265.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (CVSS 7.0)
- [CVE-2013-1266](https://cve.now/CVE-2013-1266.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1267](https://cve.now/CVE-2013-1267.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1268](https://cve.now/CVE-2013-1268.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1269](https://cve.now/CVE-2013-1269.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1270](https://cve.now/CVE-2013-1270.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1271](https://cve.now/CVE-2013-1271.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1272](https://cve.now/CVE-2013-1272.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1273](https://cve.now/CVE-2013-1273.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1274](https://cve.now/CVE-2013-1274.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1275](https://cve.now/CVE-2013-1275.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (CVSS 7.0)
- [CVE-2013-1276](https://cve.now/CVE-2013-1276.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1277](https://cve.now/CVE-2013-1277.md): Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Win (no CVSS)
- [CVE-2013-1278](https://cve.now/CVE-2013-1278.md): Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, a (CVSS 7.4)
- [CVE-2013-1279](https://cve.now/CVE-2013-1279.md): Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, a (no CVSS)
- [CVE-2013-1280](https://cve.now/CVE-2013-1280.md): The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows (no CVSS)
- [CVE-2013-1281](https://cve.now/CVE-2013-1281.md): The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL poi (no CVSS)
- [CVE-2013-1313](https://cve.now/CVE-2013-1313.md): Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers t (no CVSS)
- [CVE-2012-6075](https://cve.now/CVE-2012-6075.md): Buffer overflow in the e1000\_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and (no CVSS)
- [CVE-2013-0152](https://cve.now/CVE-2013-0152.md): Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virt (no CVSS)
- [CVE-2013-0190](https://cve.now/CVE-2013-0190.md): The xen\_failsafe\_callback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local us (no CVSS)
- [CVE-2013-0231](https://cve.now/CVE-2013-0231.md): The pciback\_enable\_msi function in the PCI backend driver (drivers/xen/pciback/conf\_space\_capability\_msi.c) in Xen for the Linux kernel 2.6. (no CVSS)
- [CVE-2013-0238](https://cve.now/CVE-2013-0238.md): The try\_parse\_v4\_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers (no CVSS)
- [CVE-2013-0241](https://cve.now/CVE-2013-0241.md): The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service (guest crash or hang) via a SPICE connection (no CVSS)
- [CVE-2013-0255](https://cve.now/CVE-2013-0255.md): PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly decla (no CVSS)
- [CVE-2013-0265](https://cve.now/CVE-2013-0265.md): The redirect\_stderr function in xnbd\_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files v (no CVSS)
- [CVE-2013-0269](https://cve.now/CVE-2013-0269.md): The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resourc (no CVSS, json)
- [CVE-2013-0276](https://cve.now/CVE-2013-0276.md): ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr\_protect (no CVSS, activerecord)
- [CVE-2013-0277](https://cve.now/CVE-2013-0277.md): ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary c (no CVSS, activerecord)
- [CVE-2013-1453](https://cve.now/CVE-2013-1453.md): plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP (no CVSS)
- [CVE-2013-1454](https://cve.now/CVE-2013-1454.md): Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to "Coding errors." (no CVSS)
- [CVE-2013-1455](https://cve.now/CVE-2013-1455.md): Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable." (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.