Home / 2009 Advisories Archive

2009 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	2 Apr 2009	17 Dec 2015	CPAI-2009-064	CVE-2009-0095 CVE-2009-0096 CVE-2009-0097	Microsoft Office Visio File Multiple Memory Corruptions (MS09-005; CVE-2009-0095; CVE-2009-0096; CVE-2009-0097)
High	12 May 2009	17 Dec 2015	CPAI-2009-102	CVE-2009-0225	Microsoft PowerPoint Converter GuideAtom Record Handling Error (MS09-017; CVE-2009-0225)
High	11 Oct 2009	17 Dec 2015	CPAI-2007-348	CVE-2007-4677	Apple QuickTime Color Table Atom Movie File Handling Heap Corruption (CVE-2007-4677)
N/A	20 Oct 2009	17 Dec 2015	SBP-2009-19		IPv6 In IPv4 Tunneling
High	10 Nov 2009	17 Dec 2015	CPAI-2009-290	CVE-2009-3128	Microsoft Office Excel SxView Record Memory Corruption (MS09-067; CVE-2009-3128)
High	10 Nov 2009	17 Dec 2015	CPAI-2009-278	CVE-2009-3129	Microsoft Office Excel Featheader Record Memory Corruption (MS09-067; CVE-2009-3129)
High	10 Nov 2009	17 Dec 2015	CPAI-2009-284	CVE-2009-3134	Microsoft Office Excel Field Sanitization Remote Code Execution (MS09-067; CVE-2009-3134)
Critical	8 Dec 2009	17 Dec 2015	CPAI-2009-257	CVE-2009-3671 CVE-2010-0245 CVE-2010-0246	Internet Explorer 8 Overlap Components Memory Corruption (MS09-072; CVE-2009-3671; CVE-2010-0245; CVE-2010-0246)
High	30 Sep 2009	16 Dec 2015	CPAI-2008-379	CVE-2008-5278	WordPress RSS feed Generator self_link HTTP_HOST Cross-Site Scripting (CVE-2008-5278)
Critical	5 Apr 2009	15 Dec 2015	CPAI-2009-066	CVE-2009-0556	Microsoft Office PowerPoint Invalid Object Reference Code Execution (CVE-2009-0556)
Critical	9 Jun 2009	15 Dec 2015	CPAI-2009-140	CVE-2009-0557	Microsoft Excel Object Record Memory Corruption (MS09-021; CVE-2009-0557)
N/A	10 Nov 2009	15 Dec 2015	SBP-2009-22	CVE-2009-3131 CVE-2010-1251 CVE-2010-1252 CVE-2010-3230	Microsoft Office Excel Legacy Files (CVE-2009-3131; CVE-2010-1251; CVE-2010-1252; CVE-2010-3230)
High	10 Nov 2009	15 Dec 2015	CPAI-2009-292	CVE-2009-3127	Microsoft Office Excel SXDB Record Cache Memory Corruption (MS09-067; CVE-2009-3127)
High	10 Nov 2009	15 Dec 2015	CPAI-2009-294	CVE-2009-3132	Microsoft Office Excel Index Parsing Pointer Corruption (MS09-067; CVE-2009-3132)
High	10 Mar 2009	7 Dec 2015	CPAI-2009-036	CVE-2009-0233 CVE-2009-0234	Microsoft DNS Server Validation Spoofing Weakness (MS09-008; CVE-2009-0233; CVE-2009-0234)
High	10 Nov 2009	7 Dec 2015	CPAI-2009-288	CVE-2009-1928	Microsoft Active Directory LSASS Recursive Stack Overflow (MS09-066; CVE-2009-1928)
Critical	18 Nov 2009	22 Nov 2015	CPAI-2005-205	CVE-2005-0581	CA License Software Invalid Command Buffer Overflow (CVE-2005-0581)
High	15 Dec 2009	22 Nov 2015	CPAI-2005-187	CVE-2005-0094	Squid Gopher Protocol Handling Buffer Overflow (CVE-2005-0094)
Critical	13 Dec 2009	12 Nov 2015	CPAI-2008-401	CVE-2008-0356	Citrix Systems Multiple Products IMA Service Buffer Overflow (CVE-2008-0356)
Critical	15 Dec 2009	12 Nov 2015	CPAI-2006-322	CVE-2006-5821	Citrix MetaFrame IMA Authentication Processing Buffer Overflow (CVE-2006-5821)
Critical	30 Dec 2009	12 Nov 2015	CPAI-2007-370	CVE-2007-4568	X.Org X Font Server Handlers Integer Overflow (CVE-2007-4568)
Critical	10 Feb 2009	10 Nov 2015	CPAI-2009-014	CVE-2009-0099	Microsoft Exchange Server EMSMDB32 Literal Processing (MS09-003; CVE-2009-0099)
Critical	15 Feb 2009	10 Nov 2015	CPAI-2009-022	CVE-2008-3974	Oracle Database SYS.OLAPIMPL_T Package ODCITABLESTART Buffer Overflow (CVE-2008-3974)
Critical	23 Feb 2009	10 Nov 2015	CPAI-2009-029	CVE-2008-5444	Oracle Secure Backup NDMP CONNECT_CLIENT_AUTH Command Buffer Overflow (CVE-2008-5444)
High	10 Mar 2009	10 Nov 2015	CPAI-2009-038	CVE-2009-0085	Microsoft Windows Security Support Provider SChannel Spoofing (MS09-007; CVE-2009-0085)
Critical	22 Mar 2009	10 Nov 2015	CPAI-2009-058	CVE-2008-4563	IBM Tivoli Storage Manager Express Backup Heap Corruption (CVE-2008-4563)
High	9 Jun 2009	10 Nov 2015	CPAI-2009-168	CVE-2009-0230	Microsoft Windows Print Spooler LoadLibrary Information Disclosure (MS09-022; CVE-2009-0230)
High	24 Jun 2009	10 Nov 2015	CPAI-2009-115		IBM AIX ToolTalk RPC Server Remote Buffer Overflow
High	12 Aug 2009	10 Nov 2015	CPAI-2009-223	CVE-2009-1968	Oracle Secure Enterprise Search search_p_groups Cross-Site Scripting (CVE-2009-1968)
High	13 Aug 2009	10 Nov 2015	CPAI-2009-211	CVE-2009-1975	Oracle BEA WebLogic Server console-help.portal Cross-Site Scripting (CVE-2009-1975)
Critical	13 Sep 2009	10 Nov 2015	CPAI-2009-195	CVE-2009-1021	Oracle Database Server REPCAT_RPC.VALIDATE_REMOTE_RC SQL Injection (CVE-2009-1021)
Critical	3 Nov 2009	10 Nov 2015	CPAI-2008-273	CVE-2008-1705	IBM solidDB Logging Function Format String (CVE-2008-1705)
Critical	4 Nov 2009	10 Nov 2015	CPAI-2008-252	CVE-2008-0339	Oracle Database Server XDB PITRIG TRUNCATE and DROP SQL Injection (CVE-2008-0339)
High	11 Nov 2009	10 Nov 2015	CPAI-2009-373		Oracle Application Server Portal Cross Site Scripting
Critical	16 Nov 2009	10 Nov 2015	CPAI-2008-399	CVE-2008-2499	IBM Lotus Sametime Server Multiplexer Stack Buffer Overflow (CVE-2008-2499)
Critical	2 Dec 2009	10 Nov 2015	CPAI-2008-284	CVE-2008-3545	HP OpenView Network Node Manager Ovalarmsrv Service Buffer Overflow (CVE-2008-3545)
High	9 Dec 2009	10 Nov 2015	CPAI-2009-336	CVE-2009-0879	IBM Director CIM Server Consumer Name Handling Denial of Service (CVE-2009-0879)
Critical	13 Dec 2009	10 Nov 2015	CPAI-2008-318	CVE-2008-2607	Oracle Database Server DBMS_AQELM Package Buffer Overflow (CVE-2008-2607)
Critical	17 Dec 2009	10 Nov 2015	CPAI-2009-297	CVE-2009-1991	Oracle Database Server CREATE_TABLES SQL Injection (CVE-2009-1991)
Critical	17 Dec 2009	10 Nov 2015	CPAI-2008-266	CVE-2008-0727	IBM Informix Dynamic Server Command Argument Processing Stack Overflow (CVE-2008-0727)
Critical	12 Nov 2009	9 Nov 2015	CPAI-2006-321	CVE-2006-5143	CA Products Discovery Service Buffer Overflow (CVE-2006-5143)
High	5 Oct 2009	3 Nov 2015	CPAI-2005-299	CVE-2005-2877	TWiki rev Parameter Shell Command Injection (CVE-2005-2877)
High	6 Dec 2009	3 Nov 2015	CPAI-2009-360	CVE-2007-6204 CVE-2008-0067	HP OpenView Network Node Manager CGI programs HTTP Request Buffer Overflow (CVE-2007-6204; CVE-2008-0067)
Critical	17 Dec 2009	3 Nov 2015	CPAI-2008-365	CVE-2008-4008	Oracle BEA WebLogic Server Apache Connector Buffer Overflow (CVE-2008-4008)
Critical	30 Dec 2009	2 Nov 2015	CPAI-2005-197	CVE-2005-0491	Arkeia Network Backup Client Buffer Overflow (CVE-2005-0491)
Critical	13 Oct 2009	1 Nov 2015	CPAI-2009-204	CVE-2009-2502	Microsoft GDI+ TIFF Buffer Overflow (MS09-062; CVE-2009-2502)
High	28 Dec 2009	20 Oct 2015	CPAI-2009-331	CVE-2009-4444	Microsoft IIS Filename Extension Parsing Security Bypass (CVE-2009-4444)
High	25 Nov 2009	19 Oct 2015	CPAI-2006-290	CVE-2006-4379	Ipswitch IMail Server SMTP Service Buffer Overflow (CVE-2006-4379)
Critical	14 Apr 2009	29 Sep 2015	CPAI-2008-178	CVE-2008-4265 CVE-2009-0100	Microsoft Excel TXO and OBJ Records Parsing Memory Corruption (MS08-074; CVE-2008-4265; CVE-2009-0100)
Critical	14 Apr 2009	29 Sep 2015	CPAI-2009-076	CVE-2008-4265 CVE-2009-0100	Microsoft Excel TXO and OBJ Records Parsing Memory Corruption (MS08-074; CVE-2008-4265; CVE-2009-0100)