Home / 2007 Advisories Archive

2007 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	29 Aug 2007	27 Jul 2008	CPAI-2007-103	FrSIRT/ADV-2007-2918	CVE-2007-4440	Preemptive Protection against Mercury Mail Transport System SMTP AUTH CRAM-MD5 Buffer Overflow Vulnerability
Critical	18 Dec 2007	23 Dec 2007	CPAI-2007-139	Microsoft Security Bulletin MS07-065	CVE-2007-3039	Update Protection against Microsoft Windows Message Queuing Remote Code Execution Vulnerability (MS07-065)
High	27 Nov 2007	27 Nov 2007	CPAI-2007-137		CVE-2007-6166	Apple QuickTime RTSP Response Crafted Content-Type Header Buffer Overflow (CVE-2007-6166)
High	7 Nov 2007	7 Nov 2007	CPAI-2007-131		CVE-2007-4672 CVE-2007-4676 CVE-2009-0010	Apple QuickTime PICT Image Parsing Malformed Records (CVE-2007-4672; CVE-2007-4676; CVE-2009-0010)
High	5 Nov 2007	5 Nov 2007	CPAI-2007-128		CVE-2007-4916	Microsoft Windows MFC Library FileFind Class Heap Overflow (CVE-2007-4916)
Critical	31 Oct 2007	31 Oct 2007	CPAI-2007-130		CVE-2007-3896	Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061; CVE-2007-3896)
High	24 Oct 2007	24 Oct 2007	CPAI-2007-122		CVE-2007-4891	Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)
N/A	20 Oct 2007	20 Oct 2007	SBP-2007-10			QQ
High	11 Oct 2007	16 Oct 2007	CPAI-2007-119	Microsoft Security Bulletin MS07-059	CVE-2007-2581	Preemptive Protection against Microsoft SharePoint Server Cross-Site Scripting Vulnerability (MS07-059)
Low	30 Aug 2007	11 Oct 2007	CPAI-2007-202			IPS-1 Protection Update for SNMP (Version 21)
High	10 Oct 2007	10 Oct 2007	CPAI-2007-113		CVE-2007-2955	Symantec Products ActiveX Control NavComUI.dll Code Execution (CVE-2007-2955)
High	10 Oct 2007	10 Oct 2007	CPAI-2007-112		CVE-2007-4058	VMware Workstation ActiveX Control vielib.dll Command Execution (CVE-2007-4058)
High	10 Oct 2007	10 Oct 2007	CPAI-2007-117		CVE-2007-3302	CA eTrust Intrusion Detection CallCode ActiveX Control Code Execution (CVE-2007-3302)
High	10 Oct 2007	10 Oct 2007	CPAI-2007-116		CVE-2007-2928 CVE-2007-2929 CVE-2007-2940	IBM and Lenovo Access Support acpRunner ActiveX Security Bypass (CVE-2007-2928; CVE-2007-2929; CVE-2007-2940)
High	27 Sep 2007	27 Sep 2007	CPAI-2007-203	Secunia Advisory 26890	CVE-2007-0063	IPS-1 Protection for VMWare DHCP Vulnerability (DHCP Version 7)
Medium	17 Sep 2007	17 Sep 2007	CPAI-2007-115		CVE-2006-6133	Microsoft Visual Studio RPT File Handling Code Execution (MS07-052; CVE-2006-6133)
High	3 May 2007	10 Sep 2007	CPAI-2007-084		CVE-2007-1560	Squid Proxy TRACE Request Remote Denial of Service (CVE-2007-1560)
High	10 Sep 2007	10 Sep 2007	CPAI-2007-105		CVE-2007-4034	Yahoo! Widgets YDP ActiveX Control Buffer Overflow (CVE-2007-4034)
Critical	7 Sep 2007	7 Sep 2007	CPAI-2003-0024		CVE-2003-0352 CVE-2003-0353	Blaster Attacks (CVE-2003-0352; CVE-2003-0353)
Medium	6 Sep 2007	6 Sep 2007	CPAI-2007-0139			Invalid Bind NAK Messages
Medium	6 Sep 2007	6 Sep 2007	CPAI-2007-0144			Stateful Inspection of Alter Context Messages
Critical	6 Sep 2007	6 Sep 2007	CPAI-2007-126		CVE-2007-3999	MIT Kerberos kadmind RPC Library RPCSEC_GSS Authentication Buffer Overflow (CVE-2007-3999)
High	6 Sep 2007	6 Sep 2007	CPAI-2007-0138			Invalid Bind ACK Messages
High	4 Sep 2007	4 Sep 2007	CPAI-2007-111		CVE-2007-3925	Ipswitch IMail Server IMAP SEARCH Command Date String Stack Overflow (CVE-2007-3925)
Critical	30 Aug 2007	30 Aug 2007	CPAI-2007-099		CVE-2007-2216	Internet Explorer tblinf32.dll ActiveX Object Code Execution (MS07-045; CVE-2007-2216)
High	29 Aug 2007	29 Aug 2007	CPAI-2007-201	US-CERT Vulnerability Note VU#739224	CVE-2007-2688 CVE-2007-3701	IPS-1 Protection Update for WWW2 (Version 27)
Medium	6 Aug 2007	23 Aug 2007	CPAI-2007-087	Microsoft Security Bulletin MS07-037	CVE-2007-1754	Update Protection against Microsoft Office Publisher 2007 Remote Code Execution Vulnerability (MS07-037)
High	2 Jul 2007	12 Aug 2007	CPAI-2007-092		CVE-2006-5198 CVE-2006-6884	WinZip ActiveX Control Instantiation Buffer Overflow (CVE-2006-5198; CVE-2006-6884)
High	12 Aug 2007	12 Aug 2007	CPAI-2007-093		CVE-2007-3111	Provideo Camimage ISSCamControl.DLL ActiveX Buffer Overflow (CVE-2007-3111)
Critical	18 Jun 2007	18 Jun 2007	CPAI-2007-075		CVE-2007-3282	Microsoft Office MSODataSourceControl ActiveX Control Denial of Service (CVE-2007-3282)
Critical	17 Jun 2007	17 Jun 2007	CPAI-2007-079		CVE-2007-2446	Samba NetDFS RPC netdfs_io_dfs_EnumInfo_d Handling Heap Overflow (CVE-2007-2446)
Critical	13 Jun 2007	13 Jun 2007	CPAI-2007-076		CVE-2007-0218 CVE-2007-2222	Internet Explorer COM Object Instantiation Memory Corruption (MS07-033; CVE-2007-0218; CVE-2007-2222)
High	17 May 2007	17 May 2007	CPAI-2007-081		CVE-2007-0039	Microsoft Exchange Server iCal Properties Denial of Service (MS07-026; CVE-2007-0039)
Medium	17 May 2007	17 May 2007	CPAI-2007-069		CVE-2007-2296	Apple QuickTime Crafted Media File FlipFileTypeAtom_BtoN Integer Underflow (CVE-2007-2296)
Critical	9 May 2007	9 May 2007	CPAI-2007-064		CVE-2007-0940	Microsoft CAPICOM Certificates ActiveX Control Code Execution (MS07-028; CVE-2007-0940)
Medium	29 Mar 2007	8 May 2007	CPAI-2007-036	FrSIRT/ADV-2007-0811	CVE-2007-1301	Preemptive Protection against MailEnable "APPEND" Buffer Overflow Vulnerability
High	1 May 2007	1 May 2007	CPAI-2007-061		CVE-2006-6490	Symantec Products SupportSoft ActiveX Control Multiple Buffer Overflows (CVE-2006-6490)
High	1 May 2007	1 May 2007	CPAI-2007-062		CVE-2007-1498	McAfee ePolicy Orchestrator SiteManager ActiveX Multiple Buffer Overflows (CVE-2007-1498)
Critical	21 Jan 2007	30 Apr 2007	CPAI-2007-008	FrSIRT/ADV-2007-0032	CVE-2007-0044  CVE-2007-0045  CVE-2007-0046  CVE-2007-0047  CVE-2007-0048	Update Protection against Multiple Adobe Acrobat Vulnerabilities
Critical	4 Apr 2007	30 Apr 2007	CPAI-2007-040	Microsoft Security Bulletin MS07-017	CVE-2007-0038	Preemptive Protection against Microsoft Windows Animated Cursor Remote Code Execution Vulnerability (MS07-017)
High	9 Jan 2007	30 Apr 2007	CPAI-2007-002	Microsoft Security Bulletin MS06-072	CVE-2006-5578	Update Protection against Microsoft Internet Explorer TIF Folder Vulnerability (MS06-072)
Medium	25 Jan 2007	30 Apr 2007	CPAI-2007-010	SmartDefense Research Center		Integrity Clientless Security (ICS) Update 3.7.131.0
High	14 Mar 2007	30 Apr 2007	CPAI-2007-030	Microsoft Security Bulletin MS07-016	CVE-2007-0217	Update Protection against Microsoft Internet Explorer FTP Responses Remote Code Execution Vulnerability (MS07-016)
Medium	22 Jan 2007	30 Apr 2007	CPAI-2007-009	Secunia Research: 25/07/2006	CVE-2006-3768	Preemptive Protection against FileCOPA FTP Server Buffer Overflow Vulnerability
Critical	11 Apr 2007	30 Apr 2007	CPAI-2007-041	Microsoft Security Bulletin MS07-017	CVE-2007-1211 CVE-2007-1212	Preemptive Protection against WMF/EMF Vulnerabilities (MS07-017)
Medium	15 Mar 2007	30 Apr 2007	CPAI-2007-035	Secunia Advisory: SA24175	CVE-2007-0981	Preemptive Protection against Mozilla Firefox Cross Domain Scripting Vulnerability
Critical	12 Apr 2007	30 Apr 2007	CPAI-2007-043	Microsoft Security Bulletin MS07-020	CVE-2007-1205	Preemptive Protection against Microsoft Agent Remote Code Execution Vulnerability (MS07-020)
Medium	27 Feb 2007	30 Apr 2007	CPAI-2007-024	Secunia Advisory: SA24051	CVE-2007-0790	Preemptive Protection against SmartFTP Banner Handling Buffer Overflow Vulnerability
High	15 Apr 2007	30 Apr 2007	SBP-2007-06			Security Best Practice: Protect Yourself against FTP Format Strings Attacks
High	15 Apr 2007	30 Apr 2007	SBP-2007-05	SmartDefense Research Center		Security Best Practice: Protect Yourself against FTP Brute Force Attacks