Skip to content
OpenAdvisories

Archive

10 June 2009

Vulnerabilities first published on this day (UTC), newest first.

66 results · Feed

  • Unscored —

    The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specif…

  • Unscored —
    CVE-2009-0558 EPSS 31%

    Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Conv…

  • Unscored —
    CVE-2009-0559 EPSS 29%

    Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute …

  • Unscored —
    CVE-2009-0549 EPSS 28%

    Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File For…

  • High 7.8
    CVE-2009-0557 Exploited EPSS 53%

    Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Mic…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2009-0561 EPSS 37%

    Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Ma…

  • Unscored —
    CVE-2009-0560 EPSS 28%

    Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Mic…

  • Unscored —

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP…

  • Unscored —
    CVE-2009-1531 EPSS 35%

    Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 …

  • Unscored —

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP…

  • Unscored —

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode …

  • Unscored —
    CVE-2009-1134 EPSS 36%

    Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pa…

  • High 8.1
    CVE-2009-1529 EPSS 29%

    Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 …

  • Unscored —
    CVE-2009-1122 Public exploit EPSS 98%

    The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode …

  • Unscored —
    CVE-2009-1528 EPSS 35%

    Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and…

  • Unscored —
    CVE-2009-1140 Public exploit EPSS 25%

    Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vis…

  • High 7.8
    CVE-2009-1123 Exploited

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2009-1530 EPSS 34%

    Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for …

  • Unscored —
    CVE-2009-1141 EPSS 28%

    Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitra…

  • High 8.8
    CVE-2009-1532 EPSS 37%

    Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 …

  • Unscored —
    CVE-2009-0239 EPSS 33%

    Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2…

  • High 7.8
    CVE-2009-0563 Exploited EPSS 60%

    Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2009-0229 Public exploit

    The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, …

  • Unscored —
    CVE-2009-0565 Public exploit EPSS 41%

    Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 20…

  • Unscored —
    CVE-2009-0228 EPSS 21%

    Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Mic…

  • Unscored —
    CVE-2009-0230 EPSS 35%

    The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and…

  • Unscored —
    CVE-2009-0568 EPSS 32%

    The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —
    CVE-2009-1699 Public exploit EPSS 33%

    The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for …

  • Unscored —

    WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, wh…

  • Unscored —

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses pre…

  • Unscored —

    Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 t…

  • Unscored —

    The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which al…

  • Unscored —

    CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod …

  • Unscored —
    CVE-2009-1533 EPSS 36%

    Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 S…

  • Unscored —
    CVE-2009-1139 EPSS 39%

    Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Direc…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —

    CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circum…

  • Unscored —

    WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors inv…

  • Unscored —
    CVE-2009-1138 EPSS 39%

    The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS req…