Home / 2010 Advisories Archive

2010 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	14 Dec 2010	14 Dec 2010	CPAI-2010-335		CVE-2010-3951	Microsoft Graphics Filters FlashPix Converter Buffer Overflow (MS10-105; CVE-2010-3951)
High	14 Dec 2010	14 Dec 2010	CPAI-2010-328		CVE-2010-3949 CVE-2010-3950	Microsoft Graphics Filters TIFF Image Converter Buffer Overflow (MS10-105; CVE-2010-3949; CVE-2010-3950)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-333		CVE-2010-3959	Microsoft OpenType Font Format Driver CMAP Table Code Execution (MS10-091; CVE-2010-3959)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-342		CVE-2010-3966	Microsoft Windows BranchCache Insecure Library Loading (MS10-095; CVE-2010-3966)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-343		CVE-2010-3965	Microsoft Windows Media Encoder Insecure Library Loading (MS10-094; CVE-2010-3965)
Medium	12 Dec 2010	12 Dec 2010	CPAI-2009-444		CVE-2009-3869	Sun Java Runtime AWT setDifflCM Stack Buffer Overflow (CVE-2009-3869)
High	8 Dec 2010	8 Dec 2010	CPAI-2010-446		CVE-2010-0112	Symantec IM Manager rdpageimlogic.aspx Multiple SQL Injections (CVE-2010-0112)
High	12 Oct 2010	3 Dec 2010	SBP-2010-27	Microsoft Security Bulletin MS10-080	CVE-2010-3230	Workaround for Microsoft Excel CrErr BIFF Record Parsing Integer Overflow Vulnerability (MS10-080)
High	2 Dec 2010	2 Dec 2010	CPAI-2010-320		CVE-2010-4142	RealFlex RealWin SCADA SCPC_INITIALIZE Buffer Overflow (CVE-2010-4142)
High	2 Dec 2010	2 Dec 2010	CPAI-2010-319		CVE-2010-2572	Microsoft PowerPoint Legacy File Parsing Memory Corruption (MS10-088; CVE-2010-2572)
High	25 Nov 2010	25 Nov 2010	SBP-2010-31			DCE-RPC Big Endian Evasion Technique
High	18 Nov 2010	18 Nov 2010	CPAI-2010-433		CVE-2010-0112	Symantec IM Manager IMAdminScheduleReport.asp SQL Injection (CVE-2010-0112)
High	17 Nov 2010	17 Nov 2010	CPAI-2010-434		CVE-2010-0112	Symantec IM Manager LoggedInUsers.lgx Definition File SQL Injections (CVE-2010-0112)
Critical	15 Nov 2010	15 Nov 2010	CPAI-2010-448		CVE-2010-3069	Samba SID Parsing Stack Buffer Overflow (CVE-2010-3069)
High	9 Nov 2010	11 Nov 2010	CPAI-2010-312	Microsoft Security Bulletin MS10-089	CVE-2010-2733 CVE-2010-2734 CVE-2010-3936	Preemptive Protection against Multiple Microsoft Forefront UAG Cross-Site Scripting Vulnerabilities (MS10-089)
High	9 Nov 2010	9 Nov 2010	CPAI-2010-313		CVE-2010-2732	Microsoft Frorefront UAG Redirection Spoofing (MS10-089; CVE-2010-2732)
High	9 Nov 2010	9 Nov 2010	CPAI-2010-282		CVE-2010-2750	Microsoft Word Unchecked Index Value Remote Code Execution (MS10-079; CVE-2010-2750)
Critical	9 Nov 2010	9 Nov 2010	CPAI-2010-311		CVE-2010-3337	Microsoft PowerPoint DLL Planting Code Execution (MS10-087; CVE-2010-3337)
Critical	9 Nov 2010	9 Nov 2010	CPAI-2010-365			HP Data Protector Media Operations SignInName Parameter Overflow
High	8 Nov 2010	8 Nov 2010	CPAI-2010-406		CVE-2010-2872	Adobe Shockwave Director PAMI Chunk Parsing Memory Corruption (CVE-2010-2872)
High	3 Nov 2010	3 Nov 2010	CPAI-2010-360		CVE-2010-3490	FreePBX Recording Interface File Upload Code Execution (CVE-2010-3490)
Critical	2 Nov 2010	2 Nov 2010	CPAI-2007-297		CVE-2007-3825	CA Alert Notification Server RPC Request Buffer Overflow (CVE-2007-3825)
High	1 Nov 2010	1 Nov 2010	CPAI-2010-304		CVE-2010-3654	Adobe Flash Player Flash Content Parsing Code Execution (APSA10-05; CVE-2010-3654)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-302		CVE-2010-4088	Adobe Shockwave Player Duplicate Keys Memory Corruption (APSB10-25; CVE-2010-4088)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-303		CVE-2010-4089	Adobe Shockwave Player Duplicate LSCM Records Memory Corruption (APSB10-25; CVE-2010-4089)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-300		CVE-2010-4084 CVE-2010-4086	Adobe Shockwave Player MMAP Entry Size Memory Corruption (APSB10-25; CVE-2010-4084; CVE-2010-4086)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-301		CVE-2010-4087	Adobe Shockwave Player CSWV Record Length Memory Corruption (APSB10-25; CVE-2010-4087)
High	27 Oct 2010	27 Oct 2010	CPAI-2010-366			HP Data Protector Media Operations Denial of Service
Critical	27 Oct 2010	27 Oct 2010	CPAI-2010-299		CVE-2010-3653	Adobe Shockwave Director rcsL Chunk Remote Code Execution (APSA10-04; CVE-2010-3653)
High	24 Oct 2010	24 Oct 2010	CPAI-2006-308		CVE-2006-3876	Microsoft PowerPoint Malformed Data Record Code Execution (MS06-058; CVE-2006-3876)
High	20 Oct 2010	20 Oct 2010	CPAI-2010-285		CVE-2010-3214	Microsoft Word UPX Data Stack Validation Buffer Overflow (MS10-079; CVE-2010-3214)
High	18 Oct 2010	18 Oct 2010	SBP-2011-01			Javascript eval Case Sensitivity Obfuscation
High	18 Oct 2010	18 Oct 2010	CPAI-2008-249		CVE-2008-0467	Firebird Database Server Username Handling Buffer Overflow (CVE-2008-0467)
Critical	17 Oct 2010	17 Oct 2010	CPAI-2010-397			Novell iManager getMultiPartParameters Unauthorized File Upload
High	14 Oct 2010	14 Oct 2010	CPAI-2005-232		CVE-2005-0755	RealNetworks RealPlayer RAM File Processing Buffer Overflow (CVE-2005-0755)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-273		CVE-2010-3242	Microsoft Excel Ghost Record Type Parsing Code Execution (MS10-080; CVE-2010-3242)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-275		CVE-2010-3240	Microsoft Excel Real Time Data Array Record Code Execution (MS10-080; CVE-2010-3240)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-290		CVE-2010-3216	Microsoft Word Bookmarks Bounds Checking Code Execution (MS10-079; CVE-2010-3216)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-291		CVE-2010-3220	Microsoft Word LVL Structure Parsing Remote Code Execution (MS10-079; CVE-2010-3220)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-295		CVE-2010-3235	Microsoft Excel Biff Record PtgName Entries Code Execution (MS10-080; CVE-2010-3235)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-278		CVE-2010-3232	Microsoft Excel Corrupted Table Records Code Execution (MS10-080; CVE-2010-3232)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-274		CVE-2010-3231	Microsoft Excel Formula BIFF Record Parsing Memory Corruption (MS10-080; CVE-2010-3231)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-271		CVE-2010-3329	Internet Explorer HtmlDlgHelper Class Memory Corruption (MS10-071; CVE-2010-3329)
High	12 Oct 2010	12 Oct 2010	CPAI-2010-284		CVE-2010-3325	Internet Explorer CSS Special Character Information Disclosure (MS10-071; CVE-2010-3325)
Critical	12 Oct 2010	12 Oct 2010	CPAI-2010-288		CVE-2010-3330	Internet Explorer Cross-Domain Information Disclosure (MS10-071; CVE-2010-3330)
Medium	5 Oct 2010	5 Oct 2010	CPAI-2010-431			LEADTOOLS Raster Twain LtocxTwainu.dll Buffer Overflow
High	4 Oct 2010	4 Oct 2010	CPAI-2010-163		CVE-2010-2876 CVE-2010-4192	Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)
Critical	4 Oct 2010	4 Oct 2010	CPAI-2010-442		CVE-2010-2628	strongSwan Certificate and Identification Payload Parsing Buffer Overflow (CVE-2010-2628)
High	4 Oct 2010	4 Oct 2010	CPAI-2010-407		CVE-2010-2866	Adobe Shockwave Director tSAC Chunk Parsing Memory Corruption (CVE-2010-2866)
High	3 Oct 2010	3 Oct 2010	CPAI-2010-383		CVE-2010-0838	Oracle Java Runtime CMM readMabCurveData Buffer Overflow (CVE-2010-0838)