Home / 2009 Advisories Archive

2009 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
N/A	22 Nov 2009	9 Jan 2014	SBP-2009-23	CVE-2009-3555	TLS Renegotiation (CVE-2009-3555)
Medium	16 Nov 2009	30 Dec 2013	CPAI-2005-337	CVE-2005-3934	Symantec pcAnywhere Message Buffer Overflow (CVE-2005-3934)
High	14 Sep 2009	29 Dec 2013	CPAI-2009-193	CVE-2009-1872	Adobe ColdFusion Server Cross-Site Request Forgery (APSB09-12; CVE-2009-1872)
High	20 Oct 2009	29 Dec 2013	CPAI-2007-308	CVE-2007-3034	Microsoft Windows Graphics Rendering Engine Code Execution (MS07-046; CVE-2007-3034)
High	2 Dec 2009	23 Dec 2013	CPAI-2005-258	CVE-2005-1215	Microsoft ISA Server HTTP Content Header (MS05-034; CVE-2005-1215)
High	13 Dec 2009	23 Dec 2013	CPAI-2008-347	CVE-2008-0016	Mozilla Firefox UTF-8 URL Handling Stack Buffer Overflow - Improved Performance (CVE-2008-0016)
Medium	15 Nov 2009	15 Dec 2013	CPAI-2004-103	CVE-2003-1025	Internet Explorer URL Spoofing (CVE-2003-1025)
High	13 Oct 2009	12 Dec 2013	CPAI-2009-216	CVE-2009-2524	Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524)
Critical	8 Sep 2009	8 Dec 2013	CPAI-2009-175	CVE-2009-2499	Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)
Critical	10 Mar 2009	5 Dec 2013	CPAI-2009-040	CVE-2009-0081	Microsoft Windows Kernel Input Validation Remote Code Execution (MS09-006; CVE-2009-0081)
High	8 Dec 2009	1 Dec 2013	CPAI-2006-184	CVE-2006-0297	Mozilla Products Graphics and XML Features Integer Overflows (CVE-2006-0297)
Critical	1 Nov 2009	21 Oct 2013	CPAI-2005-193	CVE-2005-2535	BrightStor ARCserve Backup Discovery Service Buffer Overflow (CVE-2005-2535)
High	1 Oct 2009	20 Oct 2013	CPAI-2007-357	CVE-2007-6401	3ivx MPEG-4 MP4 File Handling Stack Overflow (CVE-2007-6401)
High	10 Nov 2009	17 Oct 2013	CPAI-2005-182	CVE-2005-0022	Exim SPA Authentication Buffer Overflow (CVE-2005-0022)
High	23 Dec 2009	7 Oct 2013	CPAI-2004-156	CVE-2004-0627	MySQL Malformed Password Authentication (CVE-2004-0627)
Medium	13 Dec 2009	1 Oct 2013	CPAI-2009-289	CVE-2003-0903	Microsoft Data Access Components Broadcast Reply Buffer Overflow (MS04-003; CVE-2003-0903)
High	8 Dec 2009	30 Sep 2013	CPAI-2004-177	CVE-2004-0938	FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)
High	18 Nov 2009	12 Sep 2013	CPAI-2006-295	CVE-2006-4777	Internet Explorer daxctle.ocx KeyFrame Method Memory Corruption (MS06-067; CVE-2006-4777)
Critical	9 Jun 2009	9 Sep 2013	CPAI-2009-154	CVE-2009-0228	Microsoft Windows Print Spooler NetShareEnum Buffer Overflow (MS09-022; CVE-2009-0228)
Critical	1 Nov 2009	9 Sep 2013	CPAI-2009-274	CVE-2009-1979	Oracle Database Server Network Authentication AUTH_SESSKEY Buffer Overflow (CVE-2009-1979)
High	10 Nov 2009	21 Aug 2013	CPAI-2007-237	CVE-2007-0870	Microsoft Word Document Stream Handling Code Execution (MS07-024; CVE-2007-0870)
Critical	9 Sep 2009	19 Aug 2013	CPAI-2009-194	CVE-2009-2532 CVE-2009-3103	Microsoft Windows SMB Negotiate Request Remote Code Execution (CVE-2009-2532; CVE-2009-3103)
High	11 Aug 2009	14 Aug 2013	CPAI-2009-159	CVE-2009-1930	Microsoft Telnet Services Credential Reflection Code Execution (MS09-042; CVE-2009-1930)
High	22 Sep 2009	5 Aug 2013	CPAI-2009-376	CVE-2008-4562	HP OpenView Network Node Manager ovlaunch HTTP Request Buffer Overflow (CVE-2008-4562)
N/A	6 Jan 2009	1 Aug 2013	CPAI-2007-372		Comments Inside JPEG Files
High	12 Oct 2009	1 Aug 2013	CPAI-2006-166	CVE-2006-1016	Internet Explorer IsComponentInstalled Buffer Overflow (CVE-2006-1016)
High	22 Oct 2009	30 Jul 2013	CPAI-2005-300	CVE-2005-2968	Mail Content Firefox Command Line URL Shell Command Injection (CVE-2005-2968)
High	28 Oct 2009	30 Jul 2013	CPAI-2006-252	CVE-2006-1193	Microsoft Exchange Server Outlook Web Access Script Injection (MS06-029; CVE-2006-1193)
Medium	28 Oct 2009	30 Jul 2013	CPAI-2006-162	CVE-2006-0884	Mozilla Thunderbird WYSIWIG Engine Filtering IFRAME JavaScript Execution (CVE-2006-0884)
High	14 Oct 2009	22 Jul 2013	CPAI-2009-238	CVE-2009-2985	Adobe Reader Compact Font Format Index Memory Corruption (APSB09-15; CVE-2009-2985)
Critical	13 Jan 2009	21 Jul 2013	CPAI-2009-002	CVE-2008-4835	SMB TRANS2 Request Validation Remote Code Execution (MS09-001; CVE-2008-4835)
High	4 Oct 2009	10 Jul 2013	CPAI-2005-213	CVE-2005-0836	Sun Java Web Start JNLP File Argument Injection (CVE-2005-0836)
High	6 Oct 2009	9 Jun 2013	CPAI-2009-356	CVE-2009-0263	Nullsoft Winamp AIFF Parsing Heap Buffer Overflow (CVE-2009-0263)
High	29 Dec 2009	6 Jun 2013	CPAI-2007-329	CVE-2007-2581	Microsoft Windows SharePoint Services Cross Site Scripting (MS07-059; CVE-2007-2581)
Critical	8 Dec 2009	9 May 2013	CPAI-2009-267	CVE-2009-3674	Internet Explorer 8 Circular References Memory Corruption (MS09-072; CVE-2009-3674)
High	22 Feb 2009	8 May 2013	CPAI-2008-230	CVE-2008-2469	DNS TXT Record Parsing Buffer Overflow (CVE-2008-2469)
High	20 Aug 2009	8 May 2013	CPAI-2009-165	CVE-2009-2404	Mozilla Network Security Services Regexp Heap Overflow (CVE-2009-2404)
Critical	8 Sep 2009	8 May 2013	CPAI-2009-181	CVE-2009-1920	JScript Scripting Engine Web Pages Decoding Code Execution (MS09-045; CVE-2009-1920)
High	23 Dec 2009	8 May 2013	CPAI-2006-268	CVE-2006-0007	Microsoft Office Malformed GIF File Processing Code Execution (MS06-039; CVE-2006-0007)
High	28 Dec 2009	8 May 2013	CPAI-2008-383	CVE-2008-2086	Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow (CVE-2008-2086)
High	29 Dec 2009	8 May 2013	CPAI-2007-222	CVE-2007-0243	Sun Java GIF File Handling Memory Corruption (CVE-2007-0243)
Critical	12 Aug 2009	7 May 2013	CPAI-2009-129	CVE-2009-2408 CVE-2009-2510 CVE-2009-4565	SSL NULL Termination Certificate Validation Security Bypass (CVE-2009-2408; CVE-2009-2510; CVE-2009-4565)
High	2 Dec 2009	25 Apr 2013	CPAI-2005-338	CVE-2005-4031	MediaWiki Language Option PHP Code Execution (CVE-2005-4031)
High	3 Nov 2009	24 Apr 2013	CPAI-2006-224	CVE-2006-3698	Oracle Database SYS.KUPW-WORKER Package MAIN Procedure SQL Injection (CVE-2006-3698)
Critical	25 Oct 2009	8 Apr 2013	CPAI-2005-246	CVE-2005-1543	Novell ZENworks Remote Management Buffer Overflow (CVE-2005-1543)
High	7 Dec 2009	20 Mar 2013	CPAI-2004-213	CVE-2003-1048	Internet Explorer Malformed GIF File Double Free (MS04-025; CVE-2003-1048)
Medium	27 Oct 2009	8 Jan 2013	CPAI-2009-362	CVE-2009-0241	Ganglia Meta Daemon process_path Stack Buffer Overflow (CVE-2009-0241)
High	13 Dec 2009	27 Dec 2012	CPAI-2012-1321	CVE-2008-1544	Internet Explorer Malformed Request Header Information Disclosure (MS08-031; CVE-2008-1544)
Critical	13 Oct 2009	13 Dec 2012	CPAI-2009-200	CVE-2009-2530	Internet Explorer Uninitialized Object Memory Corruption (MS09-054; CVE-2009-2530)
High	12 Nov 2009	13 Dec 2012	CPAI-2008-289	CVE-2008-1979	CA BrightStor ARCserve Backup Discovery Service Denial of Service (CVE-2008-1979)