Home / 2009 Advisories Archive

2009 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	8 Oct 2009	4 Feb 2014	CPAI-2008-277		CVE-2008-1022	Apple QuickTime obji Atom Parsing Stack Buffer Overflow (CVE-2008-1022)
Critical	13 Oct 2009	14 Jan 2014	CPAI-2009-222		CVE-2009-2529	Internet Explorer HTML Component Handling Remote Code Execution (MS09-054; CVE-2009-2529)
Critical	12 May 2009	12 Jan 2014	CPAI-2009-110		CVE-2009-1129	Microsoft PowerPoint Converter ExEmbed Record Stack Corruption (MS09-017; CVE-2009-1129)
Critical	9 Jun 2009	9 Jan 2014	CPAI-2009-178	Microsoft MS09-019	CVE-2009-1530	Internet Explorer Multiple Events Improper Reference Counting (MS09-019; CVE-2009-1530)
Critical	14 Jul 2009	9 Jan 2014	CPAI-2009-125		CVE-2009-1539	Microsoft DirectShow Size Validation Remote Code Execution (MS09-028; CVE-2009-1539)
N/A	22 Nov 2009	9 Jan 2014	SBP-2009-23		CVE-2009-3555	TLS Renegotiation (CVE-2009-3555)
Medium	16 Nov 2009	30 Dec 2013	CPAI-2005-337		CVE-2005-3934	Symantec pcAnywhere Message Buffer Overflow (CVE-2005-3934)
High	14 Sep 2009	29 Dec 2013	CPAI-2009-193		CVE-2009-1872	Adobe ColdFusion Server Cross-Site Request Forgery (APSB09-12; CVE-2009-1872)
High	20 Oct 2009	29 Dec 2013	CPAI-2007-308		CVE-2007-3034	Microsoft Windows Graphics Rendering Engine Code Execution (MS07-046; CVE-2007-3034)
High	2 Dec 2009	23 Dec 2013	CPAI-2005-258		CVE-2005-1215	Microsoft ISA Server HTTP Content Header (MS05-034; CVE-2005-1215)
High	13 Dec 2009	23 Dec 2013	CPAI-2008-347		CVE-2008-0016	Mozilla Firefox UTF-8 URL Handling Stack Buffer Overflow - Improved Performance (CVE-2008-0016)
Medium	15 Nov 2009	15 Dec 2013	CPAI-2004-103		CVE-2003-1025	Internet Explorer URL Spoofing (CVE-2003-1025)
High	13 Oct 2009	12 Dec 2013	CPAI-2009-216		CVE-2009-2524	Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524)
Critical	8 Sep 2009	8 Dec 2013	CPAI-2009-175		CVE-2009-2499	Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)
Critical	10 Mar 2009	5 Dec 2013	CPAI-2009-040		CVE-2009-0081	Microsoft Windows Kernel Input Validation Remote Code Execution (MS09-006; CVE-2009-0081)
High	8 Dec 2009	1 Dec 2013	CPAI-2006-184		CVE-2006-0297	Mozilla Products Graphics and XML Features Integer Overflows (CVE-2006-0297)
Critical	1 Nov 2009	21 Oct 2013	CPAI-2005-193		CVE-2005-2535	BrightStor ARCserve Backup Discovery Service Buffer Overflow (CVE-2005-2535)
High	1 Oct 2009	20 Oct 2013	CPAI-2007-357		CVE-2007-6401	3ivx MPEG-4 MP4 File Handling Stack Overflow (CVE-2007-6401)
High	10 Nov 2009	17 Oct 2013	CPAI-2005-182		CVE-2005-0022	Exim SPA Authentication Buffer Overflow (CVE-2005-0022)
High	23 Dec 2009	7 Oct 2013	CPAI-2004-156		CVE-2004-0627	MySQL Malformed Password Authentication (CVE-2004-0627)
Medium	13 Dec 2009	1 Oct 2013	CPAI-2009-289		CVE-2003-0903	Microsoft Data Access Components Broadcast Reply Buffer Overflow (MS04-003; CVE-2003-0903)
High	8 Dec 2009	30 Sep 2013	CPAI-2004-177		CVE-2004-0938	FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)
High	18 Nov 2009	12 Sep 2013	CPAI-2006-295		CVE-2006-4777	Internet Explorer daxctle.ocx KeyFrame Method Memory Corruption (MS06-067; CVE-2006-4777)
Critical	9 Jun 2009	9 Sep 2013	CPAI-2009-154		CVE-2009-0228	Microsoft Windows Print Spooler NetShareEnum Buffer Overflow (MS09-022; CVE-2009-0228)
Critical	1 Nov 2009	9 Sep 2013	CPAI-2009-274		CVE-2009-1979	Oracle Database Server Network Authentication AUTH_SESSKEY Buffer Overflow (CVE-2009-1979)
High	10 Nov 2009	21 Aug 2013	CPAI-2007-237		CVE-2007-0870	Microsoft Word Document Stream Handling Code Execution (MS07-024; CVE-2007-0870)
Critical	9 Sep 2009	19 Aug 2013	CPAI-2009-194		CVE-2009-2532 CVE-2009-3103	Microsoft Windows SMB Negotiate Request Remote Code Execution (CVE-2009-2532; CVE-2009-3103)
High	22 Sep 2009	5 Aug 2013	CPAI-2009-376		CVE-2008-4562	HP OpenView Network Node Manager ovlaunch HTTP Request Buffer Overflow (CVE-2008-4562)
N/A	6 Jan 2009	1 Aug 2013	CPAI-2007-372			Comments Inside JPEG Files
High	12 Oct 2009	1 Aug 2013	CPAI-2006-166		CVE-2006-1016	Internet Explorer IsComponentInstalled Buffer Overflow (CVE-2006-1016)
High	22 Oct 2009	30 Jul 2013	CPAI-2005-300		CVE-2005-2968	Mail Content Firefox Command Line URL Shell Command Injection (CVE-2005-2968)
High	28 Oct 2009	30 Jul 2013	CPAI-2006-252		CVE-2006-1193	Microsoft Exchange Server Outlook Web Access Script Injection (MS06-029; CVE-2006-1193)
Medium	28 Oct 2009	30 Jul 2013	CPAI-2006-162		CVE-2006-0884	Mozilla Thunderbird WYSIWIG Engine Filtering IFRAME JavaScript Execution (CVE-2006-0884)
High	14 Oct 2009	22 Jul 2013	CPAI-2009-238		CVE-2009-2985	Adobe Reader Compact Font Format Index Memory Corruption (APSB09-15; CVE-2009-2985)
Critical	13 Jan 2009	21 Jul 2013	CPAI-2009-002		CVE-2008-4835	SMB TRANS2 Request Validation Remote Code Execution (MS09-001; CVE-2008-4835)
High	4 Oct 2009	10 Jul 2013	CPAI-2005-213		CVE-2005-0836	Sun Java Web Start JNLP File Argument Injection (CVE-2005-0836)
High	6 Oct 2009	9 Jun 2013	CPAI-2009-356		CVE-2009-0263	Nullsoft Winamp AIFF Parsing Heap Buffer Overflow (CVE-2009-0263)
High	29 Dec 2009	6 Jun 2013	CPAI-2007-329		CVE-2007-2581	Microsoft Windows SharePoint Services Cross Site Scripting (MS07-059; CVE-2007-2581)
Critical	8 Dec 2009	9 May 2013	CPAI-2009-267		CVE-2009-3674	Internet Explorer 8 Circular References Memory Corruption (MS09-072; CVE-2009-3674)
High	22 Feb 2009	8 May 2013	CPAI-2008-230		CVE-2008-2469	DNS TXT Record Parsing Buffer Overflow (CVE-2008-2469)
High	20 Aug 2009	8 May 2013	CPAI-2009-165		CVE-2009-2404	Mozilla Network Security Services Regexp Heap Overflow (CVE-2009-2404)
Critical	8 Sep 2009	8 May 2013	CPAI-2009-181		CVE-2009-1920	JScript Scripting Engine Web Pages Decoding Code Execution (MS09-045; CVE-2009-1920)
High	23 Dec 2009	8 May 2013	CPAI-2006-268		CVE-2006-0007	Microsoft Office Malformed GIF File Processing Code Execution (MS06-039; CVE-2006-0007)
High	28 Dec 2009	8 May 2013	CPAI-2008-383		CVE-2008-2086	Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow (CVE-2008-2086)
High	29 Dec 2009	8 May 2013	CPAI-2007-222		CVE-2007-0243	Sun Java GIF File Handling Memory Corruption (CVE-2007-0243)
Critical	12 Aug 2009	7 May 2013	CPAI-2009-129		CVE-2009-2408 CVE-2009-2510 CVE-2009-4565	SSL NULL Termination Certificate Validation Security Bypass (CVE-2009-2408; CVE-2009-2510; CVE-2009-4565)
High	2 Dec 2009	25 Apr 2013	CPAI-2005-338		CVE-2005-4031	MediaWiki Language Option PHP Code Execution (CVE-2005-4031)
High	3 Nov 2009	24 Apr 2013	CPAI-2006-224		CVE-2006-3698	Oracle Database SYS.KUPW-WORKER Package MAIN Procedure SQL Injection (CVE-2006-3698)
Critical	25 Oct 2009	8 Apr 2013	CPAI-2005-246		CVE-2005-1543	Novell ZENworks Remote Management Buffer Overflow (CVE-2005-1543)
High	7 Dec 2009	20 Mar 2013	CPAI-2004-213		CVE-2003-1048	Internet Explorer Malformed GIF File Double Free (MS04-025; CVE-2003-1048)