By publication date

Exploited and new serious CVEs: December 2010

50 records · 4 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2010-4367Proof of concept	awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via awstats · awstats · CWE-94 pre-auth RCE	High7.5	—	27.2%	Dec 2, 2010
39Monitor	CVE-2010-4278Proof of concept	operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacartica · pandora fms · CWE-78 RCE Command injection	Critical9.0	—	11.3%	Dec 2, 2010
60This week	CVE-2010-4279Weaponized	The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackerartica · pandora fms · CWE-287 Pre-auth Auth bypass	Critical10.0	—	65.6%	Dec 2, 2010
36Monitor	CVE-2010-4282Proof of concept	Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local filesartica · pandora fms · CWE-22 pre-auth RCE Path traversal	High7.5	—	19.6%	Dec 2, 2010
29Monitor	CVE-2010-3614No exploit	named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly detisc · bind · CWE-20 Pre-auth	Medium6.4	—	14.5%	Dec 6, 2010
34Monitor	CVE-2010-4254Proof of concept	Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allowmono · mono · CWE-20 pre-auth RCE	High7.5	—	13.6%	Dec 6, 2010
64This week	CVE-2010-4398Weaponized	Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SPmicrosoft · windows 7 · CWE-787 Local privilege escalation Memory safety	High7.8	KEV	8.6%	Dec 6, 2010
66This week	CVE-2010-3904Weaponized	The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before linux · linux kernel · CWE-1284 Local privilege escalation	High7.8	KEV	15.8%	Dec 6, 2010
26Monitor	CVE-2010-4409Proof of concept	Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackphp · php · CWE-189 Pre-auth Denial of service	Medium5.0	—	18.8%	Dec 6, 2010
30Monitor	CVE-2010-4259Proof of concept	Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execualexej kryukov · fontforge · CWE-119 pre-auth RCE Memory safety	Medium6.8	—	10.8%	Dec 7, 2010
40Plan	CVE-2010-4170Weaponized	The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gaisystemtap · systemtap · CWE-264 Local privilege escalation	High7.2	—	5.8%	Dec 7, 2010
91Now	CVE-2010-4344Weaponized	Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code exim · exim · CWE-787 pre-auth RCE Memory safety	Critical9.8	KEV	71.7%	Dec 14, 2010
66This week	CVE-2010-4345Weaponized	Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confiexim · exim · CWE-77 RCE Local privilege escalation Command injection	High7.8	KEV	17.9%	Dec 14, 2010
43Plan	CVE-2010-2569No exploit	pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecifiemicrosoft · publisher · CWE-94 pre-auth RCE	Critical9.3	—	20.6%	Dec 16, 2010
44Plan	CVE-2010-2570No exploit	Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 almicrosoft · publisher · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.6%	Dec 16, 2010
43Plan	CVE-2010-2571No exploit	Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to emicrosoft · publisher · CWE-20 pre-auth RCE	Critical9.3	—	21.3%	Dec 16, 2010
30Monitor	CVE-2010-2742No exploit	The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled,microsoft · windows 2003 server Pre-auth Denial of service	Medium5.4	—	29.1%	Dec 16, 2010
40Plan	CVE-2010-3338Weaponized	The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly demicrosoft · windows 7 · CWE-20 Local privilege escalation	High7.2	—	23.0%	Dec 16, 2010
44Plan	CVE-2010-3340No exploit	Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by amicrosoft · internet explorer · CWE-94 pre-auth RCE	Critical9.3	—	24.8%	Dec 16, 2010
21Monitor	CVE-2010-3342No exploit	Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access contenmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	13.3%	Dec 16, 2010
46Plan	CVE-2010-3343No exploit	Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessimicrosoft · internet explorer · CWE-908 pre-auth RCE Memory safety	Critical9.3	—	28.3%	Dec 16, 2010
46Plan	CVE-2010-3345No exploit	Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessimicrosoft · internet explorer · CWE-908 pre-auth RCE Memory safety	Critical9.3	—	28.3%	Dec 16, 2010
46Plan	CVE-2010-3346No exploit	Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer · CWE-908 pre-auth RCE Memory safety	Critical9.3	—	28.3%	Dec 16, 2010
21Monitor	CVE-2010-3348No exploit	Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access contenmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	13.3%	Dec 16, 2010
22Monitor	CVE-2010-3937No exploit	Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSEmicrosoft · exchange server · CWE-399 Denial of service	Medium4.0	—	18.3%	Dec 16, 2010
44Plan	CVE-2010-3945No exploit	Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack almicrosoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.6%	Dec 16, 2010
43Plan	CVE-2010-3946No exploit	Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack microsoft · office · CWE-189 pre-auth RCE	Critical9.3	—	21.2%	Dec 16, 2010
46Plan	CVE-2010-3947No exploit	Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works microsoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	28.8%	Dec 16, 2010
44Plan	CVE-2010-3949No exploit	Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attacmicrosoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.6%	Dec 16, 2010
43Plan	CVE-2010-3950No exploit	The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert damicrosoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Dec 16, 2010
44Plan	CVE-2010-3951No exploit	Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote amicrosoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	24.6%	Dec 16, 2010
43Plan	CVE-2010-3952No exploit	The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to executemicrosoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Dec 16, 2010
43Plan	CVE-2010-3954No exploit	Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrmicrosoft · publisher · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.4%	Dec 16, 2010
43Plan	CVE-2010-3955No exploit	pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote microsoft · publisher · CWE-94 pre-auth RCE	Critical9.3	—	18.5%	Dec 16, 2010
31Monitor	CVE-2010-3959No exploit	The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 microsoft · windows 2003 server · CWE-94 RCE Local privilege escalation	Medium6.9	—	14.0%	Dec 16, 2010
58Plan	CVE-2010-3964Weaponized	Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when themicrosoft · sharepoint server pre-auth RCE File upload	High7.5	—	94.2%	Dec 16, 2010
40Plan	CVE-2010-3965No exploit	Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Smicrosoft · windows media encoder Pre-auth	Critical9.3	—	11.5%	Dec 16, 2010
41Plan	CVE-2010-3966No exploit	Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to microsoft · windows 7 Pre-auth	Critical9.3	—	13.1%	Dec 16, 2010
43Plan	CVE-2010-3967Proof of concept	Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL microsoft · windows movie maker Pre-auth	Critical9.3	—	20.4%	Dec 16, 2010
44Plan	CVE-2010-4557Proof of concept	Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possiinvensys · wonderware inbatch · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	12.0%	Dec 17, 2010
44Plan	CVE-2010-4116No exploit	Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code viahp · storageworks storage mirroring pre-auth RCE	Critical10.0	—	11.7%	Dec 21, 2010
51Plan	CVE-2010-2590Weaponized	Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reporsap · crystal reports · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	46.7%	Dec 21, 2010
57Plan	CVE-2010-3970Weaponized	Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendemicrosoft · windows server 2003 · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	67.6%	Dec 22, 2010
61This week	CVE-2010-3971Weaponized	Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in microsoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	81.6%	Dec 22, 2010
68This week	CVE-2010-3972Weaponized	Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internetmicrosoft · internet information services · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	94.5%	Dec 23, 2010
59Plan	CVE-2010-3973Weaponized	The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XPmicrosoft · wmi administrative tools · CWE-94 pre-auth RCE	Critical9.3	—	71.7%	Dec 23, 2010
47Plan	CVE-2010-4588Proof of concept	The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute microsoft · wmi administrative tools · CWE-94 pre-auth RCE	Critical9.3	—	32.8%	Dec 23, 2010
46Plan	CVE-2010-4597Proof of concept	Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Intecava · integraxor · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	18.8%	Dec 23, 2010
28Monitor	CVE-2010-4598Proof of concept	Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a ..ecava · integraxor · CWE-22 Pre-auth Path traversal	Medium5.0	—	26.4%	Dec 23, 2010
47Plan	CVE-2010-4321Weaponized	Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary conovell · iprint client · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	33.1%	Dec 30, 2010

CVE-2010-4367
38Monitor
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via
HighCVSS 7.5Proof of conceptEPSS 27%
- pre-auth RCE
awstats · awstatsDec 2, 2010
CVE-2010-4278
39Monitor
operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metac
CriticalCVSS 9.0Proof of conceptEPSS 11%
- RCE
- Command injection
artica · pandora fmsDec 2, 2010
CVE-2010-4279
60This week
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attacker
CriticalCVSS 10.0WeaponizedEPSS 65%
- Pre-auth
- Auth bypass
artica · pandora fmsDec 2, 2010
CVE-2010-4282
36Monitor
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files
HighCVSS 7.5Proof of conceptEPSS 19%
- pre-auth RCE
- Path traversal
artica · pandora fmsDec 2, 2010
CVE-2010-3614
29Monitor
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly det
MediumCVSS 6.4No exploitEPSS 14%
- Pre-auth
isc · bindDec 6, 2010
CVE-2010-4254
34Monitor
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allow
HighCVSS 7.5Proof of conceptEPSS 13%
- pre-auth RCE
mono · monoDec 6, 2010
CVE-2010-4398
64This week
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP
HighCVSS 7.8KEVWeaponizedEPSS 8%
- Local privilege escalation
- Memory safety
microsoft · windows 7Dec 6, 2010
CVE-2010-3904
66This week
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before
HighCVSS 7.8KEVWeaponizedEPSS 15%
- Local privilege escalation
linux · linux kernelDec 6, 2010
CVE-2010-4409
26Monitor
Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attack
MediumCVSS 5.0Proof of conceptEPSS 18%
- Pre-auth
- Denial of service
php · phpDec 6, 2010
CVE-2010-4259
30Monitor
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execu
MediumCVSS 6.8Proof of conceptEPSS 10%
- pre-auth RCE
- Memory safety
alexej kryukov · fontforgeDec 7, 2010
CVE-2010-4170
40Plan
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gai
HighCVSS 7.2WeaponizedEPSS 5%
- Local privilege escalation
systemtap · systemtapDec 7, 2010
CVE-2010-4344
91Now
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code
CriticalCVSS 9.8KEVWeaponizedEPSS 71%
- pre-auth RCE
- Memory safety
exim · eximDec 14, 2010
CVE-2010-4345
66This week
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confi
HighCVSS 7.8KEVWeaponizedEPSS 17%
- RCE
- Local privilege escalation
- Command injection
exim · eximDec 14, 2010
CVE-2010-2569
43Plan
pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecifie
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
microsoft · publisherDec 16, 2010
CVE-2010-2570
44Plan
Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 al
CriticalCVSS 9.3No exploitEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · publisherDec 16, 2010
CVE-2010-2571
43Plan
Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to e
CriticalCVSS 9.3No exploitEPSS 21%
- pre-auth RCE
microsoft · publisherDec 16, 2010
CVE-2010-2742
30Monitor
The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled,
MediumCVSS 5.4No exploitEPSS 29%
- Pre-auth
- Denial of service
microsoft · windows 2003 serverDec 16, 2010
CVE-2010-3338
40Plan
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly de
HighCVSS 7.2WeaponizedEPSS 23%
- Local privilege escalation
microsoft · windows 7Dec 16, 2010
CVE-2010-3340
44Plan
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a
CriticalCVSS 9.3No exploitEPSS 24%
- pre-auth RCE
microsoft · internet explorerDec 16, 2010
CVE-2010-3342
21Monitor
Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access conten
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
- Info leak
microsoft · internet explorerDec 16, 2010
CVE-2010-3343
46Plan
Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi
CriticalCVSS 9.3No exploitEPSS 28%
- pre-auth RCE
- Memory safety
microsoft · internet explorerDec 16, 2010
CVE-2010-3345
46Plan
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi
CriticalCVSS 9.3No exploitEPSS 28%
- pre-auth RCE
- Memory safety
microsoft · internet explorerDec 16, 2010
CVE-2010-3346
46Plan
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3No exploitEPSS 28%
- pre-auth RCE
- Memory safety
microsoft · internet explorerDec 16, 2010
CVE-2010-3348
21Monitor
Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access conten
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
- Info leak
microsoft · internet explorerDec 16, 2010
CVE-2010-3937
22Monitor
Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSE
MediumCVSS 4.0No exploitEPSS 18%
- Denial of service
microsoft · exchange serverDec 16, 2010
CVE-2010-3945
44Plan
Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack al
CriticalCVSS 9.3No exploitEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · officeDec 16, 2010
CVE-2010-3946
43Plan
Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack
CriticalCVSS 9.3No exploitEPSS 21%
- pre-auth RCE
microsoft · officeDec 16, 2010
CVE-2010-3947
46Plan
Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works
CriticalCVSS 9.3No exploitEPSS 28%
- pre-auth RCE
- Memory safety
microsoft · officeDec 16, 2010
CVE-2010-3949
44Plan
Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attac
CriticalCVSS 9.3No exploitEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · officeDec 16, 2010
CVE-2010-3950
43Plan
The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert da
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · officeDec 16, 2010
CVE-2010-3951
44Plan
Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote a
CriticalCVSS 9.3No exploitEPSS 24%
- pre-auth RCE
- Memory safety
microsoft · officeDec 16, 2010
CVE-2010-3952
43Plan
The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · officeDec 16, 2010
CVE-2010-3954
43Plan
Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · publisherDec 16, 2010
CVE-2010-3955
43Plan
pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote
CriticalCVSS 9.3No exploitEPSS 18%
- pre-auth RCE
microsoft · publisherDec 16, 2010
CVE-2010-3959
31Monitor
The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008
MediumCVSS 6.9No exploitEPSS 14%
- RCE
- Local privilege escalation
microsoft · windows 2003 serverDec 16, 2010
CVE-2010-3964
58Plan
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the
HighCVSS 7.5WeaponizedEPSS 94%
- pre-auth RCE
- File upload
microsoft · sharepoint serverDec 16, 2010
CVE-2010-3965
40Plan
Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S
CriticalCVSS 9.3No exploitEPSS 11%
- Pre-auth
microsoft · windows media encoderDec 16, 2010
CVE-2010-3966
41Plan
Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to
CriticalCVSS 9.3No exploitEPSS 13%
- Pre-auth
microsoft · windows 7Dec 16, 2010
CVE-2010-3967
43Plan
Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL
CriticalCVSS 9.3Proof of conceptEPSS 20%
- Pre-auth
microsoft · windows movie makerDec 16, 2010
CVE-2010-4557
44Plan
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possi
CriticalCVSS 10.0Proof of conceptEPSS 12%
- pre-auth RCE
- Memory safety
invensys · wonderware inbatchDec 17, 2010
CVE-2010-4116
44Plan
Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code via
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
hp · storageworks storage mirroringDec 21, 2010
CVE-2010-2590
51Plan
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Repor
CriticalCVSS 9.3WeaponizedEPSS 46%
- pre-auth RCE
- Memory safety
sap · crystal reportsDec 21, 2010
CVE-2010-3970
57Plan
Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rende
CriticalCVSS 9.3WeaponizedEPSS 67%
- pre-auth RCE
- Memory safety
microsoft · windows server 2003Dec 22, 2010
CVE-2010-3971
61This week
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in
CriticalCVSS 9.3WeaponizedEPSS 81%
- pre-auth RCE
microsoft · internet explorerDec 22, 2010
CVE-2010-3972
68This week
Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet
CriticalCVSS 10.0WeaponizedEPSS 94%
- pre-auth RCE
- Memory safety
microsoft · internet information servicesDec 23, 2010
CVE-2010-3973
59Plan
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP
CriticalCVSS 9.3WeaponizedEPSS 71%
- pre-auth RCE
microsoft · wmi administrative toolsDec 23, 2010
CVE-2010-4588
47Plan
The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute
CriticalCVSS 9.3Proof of conceptEPSS 32%
- pre-auth RCE
microsoft · wmi administrative toolsDec 23, 2010
CVE-2010-4597
46Plan
Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Int
CriticalCVSS 10.0Proof of conceptEPSS 18%
- pre-auth RCE
- Memory safety
ecava · integraxorDec 23, 2010
CVE-2010-4598
28Monitor
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a ..
MediumCVSS 5.0Proof of conceptEPSS 26%
- Pre-auth
- Path traversal
ecava · integraxorDec 23, 2010
CVE-2010-4321
47Plan
Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary co
CriticalCVSS 9.3WeaponizedEPSS 33%
- pre-auth RCE
- Memory safety
novell · iprint clientDec 30, 2010