# CVEs published 2013-09-10

14 CVEs were published on September 10, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3934](https://cve.now/CVE-2013-3934.md): Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers t (no CVSS)
- [CVE-2013-4169](https://cve.now/CVE-2013-4169.md): GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X1 (no CVSS)
- [CVE-2013-4232](https://cve.now/CVE-2013-4232.md): Use-after-free vulnerability in the t2p\_readwrite\_pdf\_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a (no CVSS)
- [CVE-2013-4243](https://cve.now/CVE-2013-4243.md): Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a (no CVSS)
- [CVE-2013-4283](https://cve.now/CVE-2013-4283.md): ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguis (no CVSS)
- [CVE-2013-4298](https://cve.now/CVE-2013-4298.md): The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corrupt (no CVSS)
- [CVE-2013-5672](https://cve.now/CVE-2013-5672.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hi (no CVSS)
- [CVE-2013-5673](https://cve.now/CVE-2013-5673.md): SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbit (no CVSS)
- [CVE-2013-3657](https://cve.now/CVE-2013-3657.md): Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2013-3658](https://cve.now/CVE-2013-3658.md): Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS f (no CVSS)
- [CVE-2013-4703](https://cve.now/CVE-2013-4703.md): Cross-site scripting (XSS) vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows remote attackers to inje (no CVSS)
- [CVE-2013-4983](https://cve.now/CVE-2013-4983.md): The get\_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to (no CVSS)
- [CVE-2013-4984](https://cve.now/CVE-2013-4984.md): The close\_connections function in /opt/cma/bin/clear\_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local user (no CVSS)
- [CVE-2013-5700](https://cve.now/CVE-2013-5700.md): The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote attackers to cause a denial of service (divid (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.