Skip to content
OpenAdvisories

Archive

14 October 2009

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —
    CVE-2009-0091 EPSS 26%

    Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET ver…

  • Unscored —
    CVE-2009-0090 EPSS 21%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows re…

  • Unscored —
    CVE-2009-0555 EPSS 27%

    Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Co…

  • High 8.8
    CVE-2009-1547 Public exploit EPSS 37%

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute a…

  • Unscored —
    CVE-2009-3126 EPSS 23%

    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, …

  • Unscored —

    An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2009-2507 EPSS 19%

    A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 do…

  • High 8.1
    CVE-2009-2529 EPSS 20%

    Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified v…

  • Unscored —

    The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition…

  • Unscored —
    CVE-2009-2504 EPSS 21%

    Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and …

  • Unscored —

    The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G…

  • Unscored —

    The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application re…

  • Unscored —
    CVE-2009-2497 EPSS 23%

    The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight …

  • Unscored —
    CVE-2009-2501 EPSS 27%

    Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office …

  • Unscored —
    CVE-2009-2511 Public exploit EPSS 13%

    Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 …

  • Unscored —
    CVE-2009-2531 EPSS 23%

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…

  • Unscored —
    CVE-2009-2525 EPSS 23%

    Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Co…

  • Unscored —
    CVE-2009-2518 EPSS 23%

    Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office doc…

  • Unscored —
    CVE-2009-2500 EPSS 24%

    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, …

  • Unscored —
    CVE-2009-2530 EPSS 23%

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…

  • Unscored —
    CVE-2009-2503 EPSS 22%

    GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 …

  • Unscored —
    CVE-2009-2532 Public exploit EPSS 62%

    Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process …

  • High 8.1
    CVE-2009-2502 EPSS 22%

    Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2…

  • Unscored —
    CVE-2009-2527 EPSS 27%

    Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2009-2528 EPSS 20%

    GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows …

  • Unscored —

    Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP…

  • Unscored —
    CVE-2009-2524 EPSS 28%

    Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Micro…

  • High 7.1

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold doe…

  • Unscored —
    CVE-2009-2526 Public exploit EPSS 82%

    Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packet…