Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2011

53 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2011-4161
    44Plan

    The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CP

    CriticalCVSS 10.0No exploitEPSS 13%

    hp · color laserjet 3000Dec 1, 2011

  • CVE-2011-4034
    41Plan

    Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30

    CriticalCVSS 9.3WeaponizedEPSS 13%

    schneider-electric · vijeo historianDec 2, 2011

  • CVE-2011-4051
    61This week

    CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which

    CriticalCVSS 10.0WeaponizedEPSS 69%

    indusoft · web studioDec 5, 2011

  • CVE-2011-4130
    40Plan

    Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via ve

    CriticalCVSS 9.0No exploitEPSS 12%

    proftpd · proftpdDec 6, 2011

  • CVE-2002-2435
    21Monitor

    The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-

    MediumCVSS 4.3No exploitEPSS 13%

    microsoft · ieDec 7, 2011

  • CVE-2010-5071
    24Monitor

    The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the o

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · ieDec 7, 2011

  • CVE-2011-2462
    96Now

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x

    CriticalCVSS 9.8KEVWeaponizedEPSS 88%

    adobe · acrobatDec 7, 2011

  • CVE-2011-2653
    62This week

    Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute a

    CriticalCVSS 10.0WeaponizedEPSS 72%

    novell · zenworks asset managementDec 8, 2011

  • CVE-2011-4539
    25Monitor

    dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows

    MediumCVSS 5.0No exploitEPSS 15%

    isc · dhcpDec 8, 2011

  • CVE-2011-1508
    41Plan

    Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-ass

    CriticalCVSS 9.3No exploitEPSS 13%

    microsoft · publisherDec 13, 2011

  • CVE-2011-1983
    44Plan

    Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers

    CriticalCVSS 9.3No exploitEPSS 22%

    microsoft · officeDec 13, 2011

  • CVE-2011-1992
    23Monitor

    The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different (1) domain or (2) zone via a "trial

    MediumCVSS 4.3No exploitEPSS 18%

    microsoft · internet explorerDec 13, 2011

  • CVE-2011-2019
    40Plan

    Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows

    CriticalCVSS 9.3No exploitEPSS 11%

    microsoft · internet explorerDec 13, 2011

  • CVE-2011-3396
    42Plan

    Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL i

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · powerpointDec 13, 2011

  • CVE-2011-3397
    43Plan

    The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitr

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · windows server 2003Dec 13, 2011

  • CVE-2011-3400
    58Plan

    Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute

    CriticalCVSS 9.3WeaponizedEPSS 71%

    microsoft · windows server 2003Dec 13, 2011

  • CVE-2011-3401
    43Plan

    ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allow

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · windows 7Dec 13, 2011

  • CVE-2011-3403
    43Plan

    Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrar

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · excelDec 13, 2011

  • CVE-2011-3404
    21Monitor

    Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response

    MediumCVSS 4.3No exploitEPSS 13%

    microsoft · internet explorerDec 13, 2011

  • CVE-2011-3406
    42Plan

    Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) i

    HighCVSS 8.8No exploitEPSS 23%

    microsoft · windows 7Dec 13, 2011

  • CVE-2011-3410
    46Plan

    Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Pub

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · publisherDec 13, 2011

  • CVE-2011-3411
    45Plan

    Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handlin

    CriticalCVSS 9.3No exploitEPSS 27%

    microsoft · publisherDec 13, 2011

  • CVE-2011-3412
    45Plan

    Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leve

    CriticalCVSS 9.3No exploitEPSS 26%

    microsoft · publisherDec 13, 2011

  • CVE-2011-3413
    43Plan

    Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Pow

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · officeDec 13, 2011

  • CVE-2011-4804
    26Monitor

    Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrar

    MediumCVSS 5.0Proof of conceptEPSS 20%

    joomla · joomla\!Dec 13, 2011

  • CVE-2011-4516
    30Monitor

    Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execu

    MediumCVSS 6.8No exploitEPSS 10%

    jasper project · jasperDec 14, 2011

  • CVE-2011-4517
    30Monitor

    The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, whi

    MediumCVSS 6.8No exploitEPSS 10%

    jasper project · jasperDec 14, 2011

  • CVE-2011-4825
    42Plan

    Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, php

    HighCVSS 7.5WeaponizedEPSS 39%

    tinymce · tinymceDec 14, 2011

  • CVE-2011-4828
    50Plan

    Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arb

    HighCVSS 7.5WeaponizedEPSS 65%

    autosectools · v-cmsDec 14, 2011

  • CVE-2011-4723
    53Plan

    The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecifi

    MediumCVSS 5.7KEVWeaponizedEPSS 3%

    dlink · dir-300 firmwareDec 20, 2011

  • CVE-2011-3658
    51Plan

    The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event hand

    HighCVSS 7.5WeaponizedEPSS 69%

    mozilla · firefoxDec 21, 2011

  • CVE-2011-4453
    46Plan

    The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequ

    HighCVSS 7.5WeaponizedEPSS 51%

    pmwiki · pmwikiDec 22, 2011

  • CVE-2011-4362
    26Monitor

    Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30

    MediumCVSS 5.0Proof of conceptEPSS 21%

    lighttpd · lighttpdDec 24, 2011

  • CVE-2009-5109
    47Plan

    Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.

    CriticalCVSS 9.3WeaponizedEPSS 32%

    mini-stream · ripperDec 24, 2011

  • CVE-2010-5081
    46Plan

    Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .p

    CriticalCVSS 9.3WeaponizedEPSS 30%

    mini-stream · rm-mp3 converterDec 24, 2011

  • CVE-2011-4862
    69This week

    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and

    CriticalCVSS 10.0WeaponizedEPSS 95%

    mit · krb5-applDec 24, 2011

  • CVE-2011-5001
    59Plan

    Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micr

    CriticalCVSS 10.0WeaponizedEPSS 64%

    trend micro · control managerDec 24, 2011

  • CVE-2011-5003
    59Plan

    Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attacke

    CriticalCVSS 10.0WeaponizedEPSS 62%

    avid · media composerDec 24, 2011

  • CVE-2011-5007
    62This week

    Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possib

    CriticalCVSS 10.0WeaponizedEPSS 72%

    3ssoftware · codesysDec 24, 2011

  • CVE-2011-5009
    23Monitor

    The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL

    MediumCVSS 5.0Proof of conceptEPSS 10%

    3ssoftware · codesysDec 24, 2011

  • CVE-2011-5010
    60This week

    apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters i

    CriticalCVSS 10.0WeaponizedEPSS 65%

    ctekproducts · skyrouterDec 24, 2011

  • CVE-2011-4050
    40Plan

    Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to cause a denial of se

    MediumCVSS 5.0WeaponizedEPSS 20%

    7t · igssDec 27, 2011

  • CVE-2011-4166
    48Plan

    Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows

    HighCVSS 7.5WeaponizedEPSS 58%

    hp · managed printing administrationDec 27, 2011

  • CVE-2007-6750
    41Plan

    The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demons

    MediumCVSS 5.0WeaponizedEPSS 70%

    apache · http serverDec 27, 2011

  • CVE-2011-3414
    48Plan

    The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.

    HighCVSS 7.8No exploitEPSS 57%

    microsoft · windows 7Dec 29, 2011

  • CVE-2011-3415
    34Monitor

    Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1

    MediumCVSS 6.8No exploitEPSS 22%

    microsoft · windows 7Dec 29, 2011

  • CVE-2011-3416
    47Plan

    The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remot

    HighCVSS 8.5No exploitEPSS 43%

    microsoft · windows 7Dec 29, 2011

  • CVE-2011-3417
    47Plan

    The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when slidin

    CriticalCVSS 9.3No exploitEPSS 34%

    microsoft · windows 7Dec 29, 2011

  • CVE-2011-4885
    45Plan

    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allo

    MediumCVSS 5.0WeaponizedEPSS 83%

    php · phpDec 29, 2011

  • CVE-2011-5034
    55Plan

    Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predic

    HighCVSS 7.8WeaponizedEPSS 80%

    apache · geronimoDec 29, 2011

  • CVE-2011-5035
    40Plan

    Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly

    MediumCVSS 5.0WeaponizedEPSS 68%

    oracle · glassfish serverDec 29, 2011

  • CVE-2011-5046
    51Plan

    The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W

    CriticalCVSS 9.3Proof of conceptEPSS 45%

    microsoft · windows 7Dec 30, 2011

  • CVE-2011-4620
    41Plan

    Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assiste

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    steve j baker · plibDec 30, 2011