# CVEs published 2013-09-11

65 CVEs were published on September 11, 2013: 0 critical, 2 high. Days are UTC.

- [CVE-2013-3351](https://cve.now/CVE-2013-3351.md): Multiple stack-based buffer overflows in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attack (no CVSS)
- [CVE-2013-3352](https://cve.now/CVE-2013-3352.md): Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3353](https://cve.now/CVE-2013-3353.md): Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitr (no CVSS)
- [CVE-2013-3354](https://cve.now/CVE-2013-3354.md): Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3355](https://cve.now/CVE-2013-3355.md): Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3356](https://cve.now/CVE-2013-3356.md): Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitr (no CVSS)
- [CVE-2013-3357](https://cve.now/CVE-2013-3357.md): Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbit (no CVSS)
- [CVE-2013-3358](https://cve.now/CVE-2013-3358.md): Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbit (no CVSS)
- [CVE-2013-3359](https://cve.now/CVE-2013-3359.md): Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2013-3360](https://cve.now/CVE-2013-3360.md): Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2013-3361](https://cve.now/CVE-2013-3361.md): Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111 (no CVSS)
- [CVE-2013-3362](https://cve.now/CVE-2013-3362.md): Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111 (no CVSS)
- [CVE-2013-3363](https://cve.now/CVE-2013-3363.md): Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111 (no CVSS)
- [CVE-2013-5324](https://cve.now/CVE-2013-5324.md): Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111 (no CVSS)
- [CVE-2013-4307](https://cve.now/CVE-2013-4307.md): Multiple cross-site scripting (XSS) vulnerabilities in repo/includes/EntityView.php in the Wikibase extension for MediaWiki 1.19.x before 1. (no CVSS)
- [CVE-2013-4308](https://cve.now/CVE-2013-4308.md): Cross-site scripting (XSS) vulnerability in pages/TalkpageHistoryView.php in the LiquidThreads (LQT) extension 2.x and possibly 3.x for Medi (no CVSS)
- [CVE-2013-5723](https://cve.now/CVE-2013-5723.md): SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related (no CVSS)
- [CVE-2013-5724](https://cve.now/CVE-2013-5724.md): Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file con (no CVSS)
- [CVE-2013-0081](https://cve.now/CVE-2013-0081.md): Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned wo (no CVSS)
- [CVE-2013-0810](https://cve.now/CVE-2013-0810.md): Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute (CVSS 8.1)
- [CVE-2013-1315](https://cve.now/CVE-2013-1315.md): Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, an (no CVSS)
- [CVE-2013-1330](https://cve.now/CVE-2013-1330.md): The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Ap (no CVSS)
- [CVE-2013-1341](https://cve.now/CVE-2013-1341.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2013-1342](https://cve.now/CVE-2013-1342.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (CVSS 7.8)
- [CVE-2013-1343](https://cve.now/CVE-2013-1343.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2013-1344](https://cve.now/CVE-2013-1344.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2013-3137](https://cve.now/CVE-2013-3137.md): Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML dat (no CVSS)
- [CVE-2013-3155](https://cve.now/CVE-2013-3155.md): Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia (no CVSS)
- [CVE-2013-3156](https://cve.now/CVE-2013-3156.md): Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia (no CVSS)
- [CVE-2013-3157](https://cve.now/CVE-2013-3157.md): Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia (no CVSS)
- [CVE-2013-3158](https://cve.now/CVE-2013-3158.md): Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2013-3159](https://cve.now/CVE-2013-3159.md): Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers t (no CVSS)
- [CVE-2013-3160](https://cve.now/CVE-2013-3160.md): Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XM (no CVSS)
- [CVE-2013-3179](https://cve.now/CVE-2013-3179.md): Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inje (no CVSS)
- [CVE-2013-3180](https://cve.now/CVE-2013-3180.md): Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2013-3201](https://cve.now/CVE-2013-3201.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2013-3202](https://cve.now/CVE-2013-3202.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2013-3203](https://cve.now/CVE-2013-3203.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2013-3204](https://cve.now/CVE-2013-3204.md): Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2013-3205](https://cve.now/CVE-2013-3205.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS)
- [CVE-2013-3206](https://cve.now/CVE-2013-3206.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2013-3207](https://cve.now/CVE-2013-3207.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2013-3208](https://cve.now/CVE-2013-3208.md): Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2013-3209](https://cve.now/CVE-2013-3209.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2013-3845](https://cve.now/CVE-2013-3845.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2013-3847](https://cve.now/CVE-2013-3847.md): Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP (no CVSS)
- [CVE-2013-3848](https://cve.now/CVE-2013-3848.md): Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP (no CVSS)
- [CVE-2013-3849](https://cve.now/CVE-2013-3849.md): Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP (no CVSS)
- [CVE-2013-3850](https://cve.now/CVE-2013-3850.md): Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute ar (no CVSS)
- [CVE-2013-3851](https://cve.now/CVE-2013-3851.md): Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to (no CVSS)
- [CVE-2013-3852](https://cve.now/CVE-2013-3852.md): Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2013-3853](https://cve.now/CVE-2013-3853.md): Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS)
- [CVE-2013-3854](https://cve.now/CVE-2013-3854.md): Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS)
- [CVE-2013-3855](https://cve.now/CVE-2013-3855.md): Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cau (no CVSS)
- [CVE-2013-3856](https://cve.now/CVE-2013-3856.md): Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS)
- [CVE-2013-3857](https://cve.now/CVE-2013-3857.md): Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 S (no CVSS)
- [CVE-2013-3858](https://cve.now/CVE-2013-3858.md): Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP (no CVSS)
- [CVE-2013-3859](https://cve.now/CVE-2013-3859.md): Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which (no CVSS)
- [CVE-2013-3862](https://cve.now/CVE-2013-3862.md): Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service descript (no CVSS)
- [CVE-2013-3863](https://cve.now/CVE-2013-3863.md): Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, ak (no CVSS)
- [CVE-2013-3864](https://cve.now/CVE-2013-3864.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2013-3865](https://cve.now/CVE-2013-3865.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2013-3866](https://cve.now/CVE-2013-3866.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2013-3868](https://cve.now/CVE-2013-3868.md): Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, a (no CVSS)
- [CVE-2013-3870](https://cve.now/CVE-2013-3870.md): Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.