Home / 2009 Advisories Archive

2009 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	24 Nov 2009	8 Dec 2009	CPAI-2009-247	Microsoft Security Advisory (977981) Microsoft Security Bulletin MS09-072	CVE-2009-3672	Preemptive Protection against Microsoft Internet Explorer HTML Object Memory Corruption Vulnerability
Critical	8 Dec 2009	8 Dec 2009	CPAI-2004-189		CVE-2003-0718	Microsoft IIS WebDAV XML Message Handler Denial of Service (MS04-030; CVE-2003-0718)
Critical	8 Dec 2009	8 Dec 2009	CPAI-2005-345		CVE-2005-1929	Trend Micro Control Manager Chunked Overflow (CVE-2005-1929)
High	8 Dec 2009	8 Dec 2009	CPAI-2009-251		CVE-2009-2509	Microsoft Active Directory Federation Services Code Execution (MS09-070; CVE-2009-2509)
Critical	8 Dec 2009	8 Dec 2009	CPAI-2009-263		CVE-2009-3673	Internet Explorer Page Refresh Uninitialized Memory Corruption (MS09-072; CVE-2009-3673)
High	8 Dec 2009	8 Dec 2009	CPAI-2008-280		CVE-2008-0311	Borland StarTeam Multicast Service HTTP Handling Buffer Overflow (CVE-2008-0311)
Critical	8 Dec 2009	8 Dec 2009	CPAI-2009-261		CVE-2009-0102	Microsoft Office Project Memory Validation Remote Code Execution (MS09-074; CVE-2009-0102)
High	6 Dec 2009	6 Dec 2009	CPAI-2005-199		CVE-2005-0056	Internet Explorer CDF Cross Domain Scripting (MS05-014; CVE-2005-0056)
Medium	6 Dec 2009	6 Dec 2009	CPAI-2009-359			Office OCX Multiple ActiveX Controls OpenWebFile Arbitrary Program Execution
High	6 Dec 2009	6 Dec 2009	CPAI-2008-352		CVE-2008-4449	mIRC PRIVMSG Message Processing Buffer Overflow (CVE-2008-4449)
High	6 Dec 2009	6 Dec 2009	CPAI-2007-305		CVE-2007-2223	Microsoft XML Core Services Memory Corruption (MS07-042; CVE-2007-2223)
High	2 Dec 2009	2 Dec 2009	CPAI-2005-221		CVE-2005-0986	IBM Lotus Domino Web Service Denial of Service (CVE-2005-0986)
High	2 Dec 2009	2 Dec 2009	CPAI-2005-271			Alt-N MDaemon IMAP Server CREATE Command Buffer Overflow
Critical	1 Dec 2009	1 Dec 2009	CPAI-2004-162		CVE-2004-0728	Microsoft SMS Remote Control Service Denial of Service (CVE-2004-0728)
Medium	1 Dec 2009	1 Dec 2009	CPAI-2004-117		CVE-2004-0164	KAME IKE Daemon (racoon) INITIAL_CONTACT Improper Handling (CVE-2004-0164)
Medium	1 Dec 2009	1 Dec 2009	CPAI-2004-145		CVE-2004-0487	Symantec Norton AntiVirus 2004 ActiveX Denial of Service (CVE-2004-0487)
High	1 Dec 2009	1 Dec 2009	CPAI-2004-134			Internet Explorer MSWebDVD Class Null Pointer Assignment
Medium	1 Dec 2009	1 Dec 2009	CPAI-2006-247		CVE-2006-2447	SpamAssassin Spamd Configurable Options Code Execution (CVE-2006-2447)
Critical	1 Dec 2009	1 Dec 2009	CPAI-2006-178		CVE-2006-0272	Oracle Database Server XDB.DBMS_XMLSCHEMA Buffer Overflow (CVE-2006-0272)
Critical	30 Nov 2009	30 Nov 2009	CPAI-2004-140		CVE-2004-1992	Serv-U FTP Server LIST Parameter Buffer Overrun (CVE-2004-1992)
High	30 Nov 2009	30 Nov 2009	CPAI-2004-202		CVE-2004-1135	Ipswitch WS_FTP Server Commands Buffer Overflow Denial of Service (CVE-2004-1135)
High	30 Nov 2009	30 Nov 2009	CPAI-2004-200		CVE-2004-1029	Sun Java Plug-in Sandbox Security Bypass (CVE-2004-1029)
Medium	29 Nov 2009	29 Nov 2009	CPAI-2007-354		CVE-2007-6009	ACD Systems ACDSee Products XPM Values Section Buffer Overflow (CVE-2007-6009)
High	29 Nov 2009	29 Nov 2009	CPAI-2005-274		CVE-2005-2297	Sybase EAServer WebConsole Buffer Overflow (CVE-2005-2297)
Critical	29 Nov 2009	29 Nov 2009	CPAI-2007-236		CVE-2007-0446	HP Mercury Multiple Products Agent Command Processing Buffer Overflow (CVE-2007-0446)
High	29 Nov 2009	29 Nov 2009	CPAI-2005-200		CVE-2005-0455	RealNetworks RealPlayer SMIL File Handling Buffer Overflow (CVE-2005-0455)
Medium	26 Nov 2009	26 Nov 2009	CPAI-2005-280		CVE-2005-2558	MySQL CREATE FUNCTION init_syms Buffer Overflow (CVE-2005-2558)
High	26 Nov 2009	26 Nov 2009	CPAI-2007-317		CVE-2007-4776	Microsoft Visual Basic 6.0 VBP Project File Handling Buffer Overflow (CVE-2007-4776)
High	26 Nov 2009	26 Nov 2009	CPAI-2007-257		CVE-2007-2171	Novell GroupWise WebAccess Basic Authentication Buffer Overflow (CVE-2007-2171)
Critical	26 Nov 2009	26 Nov 2009	CPAI-2005-317		CVE-2005-3438	Oracle Database sys.pbsde.init Procedure Buffer Overflow (CVE-2005-3438)
Critical	25 Nov 2009	25 Nov 2009	CPAI-2008-261		CVE-2008-1365	Trend Micro OfficeScan CGI Password Decryption Buffer Overflow (CVE-2008-1365)
High	25 Nov 2009	25 Nov 2009	CPAI-2007-221		CVE-2007-0247	Squid Proxy FTP URI Processing Denial of Service (CVE-2007-0247)
High	25 Nov 2009	25 Nov 2009	CPAI-2005-236		CVE-2005-0555	Internet Explorer Content Advisor Memory Corruption (MS05-020; CVE-2005-0555)
High	25 Nov 2009	25 Nov 2009	CPAI-2007-288		CVE-2007-2798	MIT Kerberos kadmind Rename Principal Buffer Overflow (CVE-2007-2798)
High	25 Nov 2009	25 Nov 2009	CPAI-2006-272		CVE-2006-4517	Novell iManager Tomcat HTTP POST Request Handling Denial of Service (CVE-2006-4517)
High	24 Nov 2009	24 Nov 2009	CPAI-2005-288		CVE-2005-2020	3Com Network Supervisor Directory Traversal (CVE-2005-2020)
High	24 Nov 2009	24 Nov 2009	CPAI-2005-318		CVE-2005-2122	Microsoft Windows LNK File Shell Buffer Overflow (MS05-049; CVE-2005-2122)
Critical	22 Nov 2009	22 Nov 2009	CPAI-2005-316		CVE-2005-4734	IIS RSA Authentication Agent for Web Redirect Buffer Overflow (CVE-2005-4734)
Critical	22 Nov 2009	22 Nov 2009	CPAI-2003-43		CVE-2003-0714	Microsoft Exchange Server XEXCH50 Command Buffer Overflow (MS03-046; CVE-2003-0714)
Medium	19 Nov 2009	19 Nov 2009	CPAI-2004-198		CVE-2004-1331	Internet Explorer execCommand File Type Spoofing (CVE-2004-1331)
High	19 Nov 2009	19 Nov 2009	CPAI-2004-199		CVE-2004-1119	Winamp IN_CDDA.dll Buffer Overflow (CVE-2004-1119)
High	19 Nov 2009	19 Nov 2009	CPAI-2009-298		CVE-2009-3133	Microsoft Office Excel Document Parsing Memory Corruption (MS09-067; CVE-2009-3133)
Critical	19 Nov 2009	19 Nov 2009	CPAI-2007-256		CVE-2007-2170	Oracle Database DBMS_SNAP_INTERNAL Package Buffer Overflow (CVE-2007-2170)
Medium	19 Nov 2009	19 Nov 2009	CPAI-2004-206		CVE-2004-1541	VanDyke SecureCRT Arbitrary Configuration Folder Specification (CVE-2004-1541)
High	18 Nov 2009	18 Nov 2009	CPAI-2004-209		CVE-2004-1153	Adobe Acrobat Reader eBook Format String (CVE-2004-1153)
Critical	18 Nov 2009	18 Nov 2009	CPAI-2007-313		CVE-2007-3618	EMC Legato NetWorker Remote Execution Service Buffer Overflow (CVE-2007-3618)
Critical	18 Nov 2009	18 Nov 2009	CPAI-2005-228		CVE-2005-1197	Oracle Database SUBSCRIPTION_NAME Parameter SQL Injection (CVE-2005-1197)
High	18 Nov 2009	18 Nov 2009	CPAI-2006-213		CVE-2006-0991	Symantec VERITAS NetBackup vnetd Buffer Overflow (CVE-2006-0991)
High	18 Nov 2009	18 Nov 2009	CPAI-2009-372		CVE-2009-0410	Novell Groupwise Internet Agent RCPT Command Buffer Overflow (CVE-2009-0410)
Critical	17 Nov 2009	17 Nov 2009	CPAI-2005-227		CVE-2005-1197	Oracle Database Server DBMS_METADATA Package SQL Injection (CVE-2005-1197)