Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2009

56 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2009-3672
    59Plan

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, wh

    CriticalCVSS 9.3WeaponizedEPSS 71%

    microsoft · internet explorerDec 2, 2009

  • CVE-2009-4146
    40Plan

    The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD

    HighCVSS 7.2WeaponizedEPSS 3%

    freebsd · freebsdDec 2, 2009

  • CVE-2009-4147
    40Plan

    The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2

    HighCVSS 7.2WeaponizedEPSS 3%

    freebsd · freebsdDec 2, 2009

  • CVE-2009-4188
    61This week

    HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary

    CriticalCVSS 10.0WeaponizedEPSS 69%

    hp · operations dashboardDec 3, 2009

  • CVE-2009-4189
    64This week

    HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code

    CriticalCVSS 10.0WeaponizedEPSS 78%

    hp · operations managerDec 3, 2009

  • CVE-2009-4195
    58Plan

    Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code vi

    CriticalCVSS 9.3WeaponizedEPSS 70%

    adobe · illustratorDec 4, 2009

  • CVE-2009-3560
    27Monitor

    The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attac

    MediumCVSS 5.0No exploitEPSS 24%

    libexpat project · libexpatDec 4, 2009

  • CVE-2009-4223
    46Plan

    PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code

    HighCVSS 7.5Proof of conceptEPSS 54%

    gianni tommasi · kr-php web content serverDec 7, 2009

  • CVE-2009-4225
    46Plan

    Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute

    CriticalCVSS 9.3WeaponizedEPSS 30%

    ca · etrust pestpatrole ppctl.dll activexDec 8, 2009

  • CVE-2009-4227
    30Monitor

    Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject functi

    MediumCVSS 6.8Proof of conceptEPSS 11%

    xfig · xfigDec 8, 2009

  • CVE-2009-1568
    47Plan

    Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to

    CriticalCVSS 9.3WeaponizedEPSS 32%

    novell · iprint clientDec 8, 2009

  • CVE-2009-1569
    48Plan

    Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to

    CriticalCVSS 9.3WeaponizedEPSS 37%

    novell · iprintDec 8, 2009

  • CVE-2009-3844
    62This week

    Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote at

    CriticalCVSS 10.0WeaponizedEPSS 74%

    hp · openview data protector application recovery managerDec 8, 2009

  • CVE-2009-0102
    44Plan

    Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which al

    CriticalCVSS 9.3No exploitEPSS 23%

    microsoft · office projectDec 9, 2009

  • CVE-2009-2505
    49Plan

    The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected

    CriticalCVSS 10.0No exploitEPSS 31%

    microsoft · windows server 2008Dec 9, 2009

  • CVE-2009-2506
    46Plan

    Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Win

    CriticalCVSS 9.3No exploitEPSS 31%

    microsoft · windows 2000Dec 9, 2009

  • CVE-2009-2509
    41Plan

    Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate hea

    CriticalCVSS 9.0No exploitEPSS 17%

    microsoft · windows server 2003Dec 9, 2009

  • CVE-2009-3563
    40Plan

    ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption)

    MediumCVSS 6.4WeaponizedEPSS 32%

    ntp · ntpDec 9, 2009

  • CVE-2009-3671
    38Monitor

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    HighCVSS 8.1No exploitEPSS 21%

    microsoft · internet explorerDec 9, 2009

  • CVE-2009-3673
    45Plan

    Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · internet explorerDec 9, 2009

  • CVE-2009-3674
    45Plan

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    CriticalCVSS 9.3No exploitEPSS 26%

    microsoft · internet explorerDec 9, 2009

  • CVE-2009-3675
    34Monitor

    LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allow

    MediumCVSS 6.8No exploitEPSS 24%

    microsoft · windows 2000Dec 9, 2009

  • CVE-2009-3677
    47Plan

    The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 200

    CriticalCVSS 10.0No exploitEPSS 21%

    microsoft · windows 2000Dec 9, 2009

  • CVE-2009-4265
    46Plan

    Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary co

    CriticalCVSS 9.3WeaponizedEPSS 31%

    pointdev · ideal administration 2009Dec 10, 2009

  • CVE-2009-3794
    40Plan

    Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary c

    CriticalCVSS 9.3No exploitEPSS 11%

    adobe · adobe airDec 10, 2009

  • CVE-2009-3845
    47Plan

    The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary com

    CriticalCVSS 10.0No exploitEPSS 21%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-3846
    44Plan

    Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers

    CriticalCVSS 10.0No exploitEPSS 13%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-3847
    43Plan

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary cod

    CriticalCVSS 10.0No exploitEPSS 10%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-3848
    44Plan

    Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to

    CriticalCVSS 10.0No exploitEPSS 11%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-3849
    62This week

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute ar

    CriticalCVSS 10.0WeaponizedEPSS 73%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-4176
    44Plan

    Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote atta

    CriticalCVSS 10.0No exploitEPSS 11%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-4177
    44Plan

    Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitr

    CriticalCVSS 10.0No exploitEPSS 13%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-4178
    62This week

    Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to exe

    CriticalCVSS 10.0WeaponizedEPSS 74%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-4179
    60This week

    Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to exec

    CriticalCVSS 10.0WeaponizedEPSS 66%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-4180
    44Plan

    Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    CriticalCVSS 10.0No exploitEPSS 13%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-4181
    43Plan

    Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to

    CriticalCVSS 10.0No exploitEPSS 10%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-0898
    44Plan

    Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary c

    CriticalCVSS 10.0No exploitEPSS 14%

    hp · openview network node managerDec 10, 2009

  • CVE-2009-3027
    43Plan

    VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager

    CriticalCVSS 10.0No exploitEPSS 10%

    symantec · backup exec continuous protection serverDec 11, 2009

  • CVE-2009-4210
    42Plan

    The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (mem

    CriticalCVSS 9.3No exploitEPSS 16%

    microsoft · windows 2000Dec 12, 2009

  • CVE-2009-4309
    44Plan

    Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 200

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · windows media playerDec 12, 2009

  • CVE-2009-4310
    44Plan

    Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 20

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · windows 2000Dec 12, 2009

  • CVE-2009-4311
    44Plan

    Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to e

    CriticalCVSS 9.3No exploitEPSS 21%

    microsoft · windows 2000Dec 12, 2009

  • CVE-2009-4312
    43Plan

    Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to e

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · windows 2000Dec 12, 2009

  • CVE-2009-4313
    43Plan

    ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cau

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · windows 2000Dec 12, 2009

  • CVE-2009-4324
    86Now

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before

    HighCVSS 7.8KEVWeaponizedEPSS 81%

    adobe · acrobatDec 14, 2009

  • CVE-2007-2280
    58Plan

    Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenV

    CriticalCVSS 10.0WeaponizedEPSS 60%

    hp · openview storage data protectorDec 18, 2009

  • CVE-2009-4140
    53Plan

    Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0

    HighCVSS 7.5WeaponizedEPSS 75%

    teethgrinder.co.uk · open flash chartDec 22, 2009

  • CVE-2009-3305
    23Monitor

    Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control h

    MediumCVSS 5.0Proof of conceptEPSS 10%

    pps.jussieu · polipoDec 24, 2009

  • CVE-2009-4137
    35Monitor

    The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the

    HighCVSS 7.5Proof of conceptEPSS 16%

    matomo · matomoDec 24, 2009

  • CVE-2009-3295
    32Monitor

    The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT K

    MediumCVSS 5.0No exploitEPSS 40%

    mit · kerberos 5Dec 29, 2009

  • CVE-2009-4444
    43Plan

    Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine

    MediumCVSS 6.0No exploitEPSS 63%

    microsoft · internet information servicesDec 29, 2009

  • CVE-2009-4445
    28Monitor

    Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload applications, allows remote atta

    MediumCVSS 6.0No exploitEPSS 12%

    microsoft · internet information servicesDec 29, 2009

  • CVE-2009-4462
    46Plan

    Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attacker

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    intellicom · netbiterconfigDec 30, 2009

  • CVE-2009-4484
    51Plan

    Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysq

    HighCVSS 7.5WeaponizedEPSS 69%

    oracle · mysqlDec 30, 2009

  • CVE-2009-4498
    40Plan

    The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request.

    MediumCVSS 6.8WeaponizedEPSS 31%

    zabbix · zabbixDec 31, 2009

  • CVE-2009-4502
    43Plan

    The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the

    CriticalCVSS 9.3WeaponizedEPSS 21%

    zabbix · zabbixDec 31, 2009