Home / 2009 Advisories Archive

2009 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	14 Jul 2009	6 Jun 2014	CPAI-2009-123		CVE-2009-1538	Microsoft DirectShow Pointer Validation Remote Code Execution (MS09-028; CVE-2009-1538)
High	15 Nov 2009	2 Jun 2014	CPAI-2007-316		CVE-2007-4560	ClamAV Mail Filter Extension Crafted Recipient Command Execution (CVE-2007-4560)
High	5 Oct 2009	22 May 2014	CPAI-2005-242		CVE-2005-1476	Mozilla Firefox IFRAME Cross Site Scripting (CVE-2005-1476)
High	9 Jun 2009	19 May 2014	CPAI-2009-158		CVE-2009-0549	Microsoft Excel BRAI Record Pointer Corruption (MS09-021; CVE-2009-0549)
High	13 Oct 2009	14 May 2014	CPAI-2005-217		CVE-2005-0468	Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)
High	10 Nov 2009	8 May 2014	CPAI-2006-315		CVE-2006-6605	MailEnable POP3 Service PASS Command Buffer Overflow (CVE-2006-6605)
High	1 Oct 2009	1 May 2014	CPAI-2007-365		CVE-2007-6335	ClamAV libclamav MEW PE File Handling Integer Overflow (CVE-2007-6335)
High	18 Oct 2009	30 Apr 2014	CPAI-2005-184		CVE-2004-1373	SHOUTcast Filename Format String (CVE-2004-1373)
Critical	14 Oct 2009	27 Apr 2014	CPAI-2009-254		CVE-2009-2989	BMP Image Improper Dimensions (CVE-2009-2989)
High	8 Oct 2009	10 Apr 2014	CPAI-2008-291		CVE-2008-1965	IBM Lotus Expeditor cai URI Handler Command Execution (CVE-2008-1965)
Critical	16 Dec 2009	7 Apr 2014	CPAI-2005-285		CVE-2005-2768	Sophos Anti-Virus Visio File Parsing Buffer Overflow (CVE-2005-2768)
High	27 Apr 2009	2 Apr 2014	CPAI-2009-009		CVE-2008-5457	Oracle BEA WebLogic IIS connector JSESSIONID Stack Buffer Overflow (CVE-2008-5457)
High	8 Dec 2009	2 Mar 2014	CPAI-2009-259		CVE-2009-2506	Microsoft WordPad and Office Text Converter Memory Corruption (MS09-073; CVE-2009-2506)
High	5 Oct 2009	23 Feb 2014	CPAI-2007-226		CVE-2007-0021	Apple Mac OS X iChat AIM URL Format String (CVE-2007-0021)
High	8 Nov 2009	23 Feb 2014	CPAI-2005-180		CVE-2004-1316	Mozilla NNTP URL Handling Buffer Overflow (CVE-2004-1316)
Medium	6 Dec 2009	23 Feb 2014	CPAI-2009-342		CVE-2009-0215	IBM Access Support ActiveX GetXMLValue Method Buffer Overflow (CVE-2009-0215)
High	13 Oct 2009	18 Feb 2014	CPAI-2009-212		CVE-2009-2526	Microsoft SMB Infinite Loop Denial of Service (MS09-050; CVE-2009-2526)
High	8 Oct 2009	4 Feb 2014	CPAI-2008-277		CVE-2008-1022	Apple QuickTime obji Atom Parsing Stack Buffer Overflow (CVE-2008-1022)
Critical	13 Oct 2009	14 Jan 2014	CPAI-2009-222		CVE-2009-2529	Internet Explorer HTML Component Handling Remote Code Execution (MS09-054; CVE-2009-2529)
Critical	12 May 2009	12 Jan 2014	CPAI-2009-110		CVE-2009-1129	Microsoft PowerPoint Converter ExEmbed Record Stack Corruption (MS09-017; CVE-2009-1129)
Critical	9 Jun 2009	9 Jan 2014	CPAI-2009-178	Microsoft MS09-019	CVE-2009-1530	Internet Explorer Multiple Events Improper Reference Counting (MS09-019; CVE-2009-1530)
Critical	14 Jul 2009	9 Jan 2014	CPAI-2009-125		CVE-2009-1539	Microsoft DirectShow Size Validation Remote Code Execution (MS09-028; CVE-2009-1539)
N/A	22 Nov 2009	9 Jan 2014	SBP-2009-23		CVE-2009-3555	TLS Renegotiation (CVE-2009-3555)
Medium	16 Nov 2009	30 Dec 2013	CPAI-2005-337		CVE-2005-3934	Symantec pcAnywhere Message Buffer Overflow (CVE-2005-3934)
High	14 Sep 2009	29 Dec 2013	CPAI-2009-193		CVE-2009-1872	Adobe ColdFusion Server Cross-Site Request Forgery (APSB09-12; CVE-2009-1872)
High	20 Oct 2009	29 Dec 2013	CPAI-2007-308		CVE-2007-3034	Microsoft Windows Graphics Rendering Engine Code Execution (MS07-046; CVE-2007-3034)
High	2 Dec 2009	23 Dec 2013	CPAI-2005-258		CVE-2005-1215	Microsoft ISA Server HTTP Content Header (MS05-034; CVE-2005-1215)
High	13 Dec 2009	23 Dec 2013	CPAI-2008-347		CVE-2008-0016	Mozilla Firefox UTF-8 URL Handling Stack Buffer Overflow - Improved Performance (CVE-2008-0016)
Medium	15 Nov 2009	15 Dec 2013	CPAI-2004-103		CVE-2003-1025	Internet Explorer URL Spoofing (CVE-2003-1025)
High	13 Oct 2009	12 Dec 2013	CPAI-2009-216		CVE-2009-2524	Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524)
Critical	8 Sep 2009	8 Dec 2013	CPAI-2009-175		CVE-2009-2499	Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)
Critical	10 Mar 2009	5 Dec 2013	CPAI-2009-040		CVE-2009-0081	Microsoft Windows Kernel Input Validation Remote Code Execution (MS09-006; CVE-2009-0081)
High	8 Dec 2009	1 Dec 2013	CPAI-2006-184		CVE-2006-0297	Mozilla Products Graphics and XML Features Integer Overflows (CVE-2006-0297)
Critical	1 Nov 2009	21 Oct 2013	CPAI-2005-193		CVE-2005-2535	BrightStor ARCserve Backup Discovery Service Buffer Overflow (CVE-2005-2535)
High	1 Oct 2009	20 Oct 2013	CPAI-2007-357		CVE-2007-6401	3ivx MPEG-4 MP4 File Handling Stack Overflow (CVE-2007-6401)
High	10 Nov 2009	17 Oct 2013	CPAI-2005-182		CVE-2005-0022	Exim SPA Authentication Buffer Overflow (CVE-2005-0022)
High	23 Dec 2009	7 Oct 2013	CPAI-2004-156		CVE-2004-0627	MySQL Malformed Password Authentication (CVE-2004-0627)
Medium	13 Dec 2009	1 Oct 2013	CPAI-2009-289		CVE-2003-0903	Microsoft Data Access Components Broadcast Reply Buffer Overflow (MS04-003; CVE-2003-0903)
High	8 Dec 2009	30 Sep 2013	CPAI-2004-177		CVE-2004-0938	FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)
Critical	9 Jun 2009	9 Sep 2013	CPAI-2009-154		CVE-2009-0228	Microsoft Windows Print Spooler NetShareEnum Buffer Overflow (MS09-022; CVE-2009-0228)
Critical	1 Nov 2009	9 Sep 2013	CPAI-2009-274		CVE-2009-1979	Oracle Database Server Network Authentication AUTH_SESSKEY Buffer Overflow (CVE-2009-1979)
High	10 Nov 2009	21 Aug 2013	CPAI-2007-237		CVE-2007-0870	Microsoft Word Document Stream Handling Code Execution (MS07-024; CVE-2007-0870)
Critical	9 Sep 2009	19 Aug 2013	CPAI-2009-194		CVE-2009-2532 CVE-2009-3103	Microsoft Windows SMB Negotiate Request Remote Code Execution (CVE-2009-2532; CVE-2009-3103)
High	22 Sep 2009	5 Aug 2013	CPAI-2009-376		CVE-2008-4562	HP OpenView Network Node Manager ovlaunch HTTP Request Buffer Overflow (CVE-2008-4562)
N/A	6 Jan 2009	1 Aug 2013	CPAI-2007-372			Comments Inside JPEG Files
High	12 Oct 2009	1 Aug 2013	CPAI-2006-166		CVE-2006-1016	Internet Explorer IsComponentInstalled Buffer Overflow (CVE-2006-1016)
High	22 Oct 2009	30 Jul 2013	CPAI-2005-300		CVE-2005-2968	Mail Content Firefox Command Line URL Shell Command Injection (CVE-2005-2968)
High	28 Oct 2009	30 Jul 2013	CPAI-2006-252		CVE-2006-1193	Microsoft Exchange Server Outlook Web Access Script Injection (MS06-029; CVE-2006-1193)
Medium	28 Oct 2009	30 Jul 2013	CPAI-2006-162		CVE-2006-0884	Mozilla Thunderbird WYSIWIG Engine Filtering IFRAME JavaScript Execution (CVE-2006-0884)
High	14 Oct 2009	22 Jul 2013	CPAI-2009-238		CVE-2009-2985	Adobe Reader Compact Font Format Index Memory Corruption (APSB09-15; CVE-2009-2985)