# CVEs published 2014-12-09

18 CVEs were published on December 9, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8484](https://cve.now/CVE-2014-8484.md): The srec\_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bou (no CVSS)
- [CVE-2014-8485](https://cve.now/CVE-2014-8485.md): The setup\_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash (no CVSS)
- [CVE-2014-8501](https://cve.now/CVE-2014-8501.md): The \_bfd\_XXi\_swap\_aouthdr\_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2014-8502](https://cve.now/CVE-2014-8502.md): Heap-based buffer overflow in the pe\_print\_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to caus (no CVSS)
- [CVE-2014-8503](https://cve.now/CVE-2014-8503.md): Stack-based buffer overflow in the ihex\_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a deni (no CVSS)
- [CVE-2014-8504](https://cve.now/CVE-2014-8504.md): Stack-based buffer overflow in the srec\_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a deni (no CVSS)
- [CVE-2014-8737](https://cve.now/CVE-2014-8737.md): Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (no CVSS)
- [CVE-2014-9065](https://cve.now/CVE-2014-9065.md): common/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which allows local x86 guest users to cause a deni (no CVSS)
- [CVE-2014-9066](https://cve.now/CVE-2014-9066.md): Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users (no CVSS)
- [CVE-2014-9274](https://cve.now/CVE-2014-9274.md): UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing (no CVSS)
- [CVE-2014-9275](https://cve.now/CVE-2014-9275.md): UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a (no CVSS)
- [CVE-2014-9281](https://cve.now/CVE-2014-9281.md): Cross-site scripting (XSS) vulnerability in admin/copy\_field.php in MantisBT before 1.2.18 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2014-9316](https://cve.now/CVE-2014-9316.md): The mjpeg\_decode\_app function in libavcodec/mjpegdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote att (no CVSS)
- [CVE-2014-9317](https://cve.now/CVE-2014-9317.md): The decode\_ihdr\_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote atta (no CVSS)
- [CVE-2014-9318](https://cve.now/CVE-2014-9318.md): The raw\_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers t (no CVSS)
- [CVE-2014-9319](https://cve.now/CVE-2014-9319.md): The ff\_hevc\_decode\_nal\_sps function in libavcodec/hevc\_ps.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remot (no CVSS)
- [CVE-2014-9351](https://cve.now/CVE-2014-9351.md): engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service (crash) via un (no CVSS)
- [CVE-2014-9352](https://cve.now/CVE-2014-9352.md): Cross-site scripting (XSS) vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-12-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.