Home / 2010 Advisories Archive

2010 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
N/A	13 Apr 2010	29 Jun 2011	SBP-2010-15		CVE-2010-0268	Microsoft Windows Media Player ActiveX Codec Retrieval (CVE-2010-0268)
Critical	26 Dec 2010	28 Jun 2011	CPAI-2010-350		CVE-2010-3973	Microsoft WMI Administrative Tools WBEMSingleView.ocx Code Execution (CVE-2010-3973)
High	1 Feb 2010	21 Jun 2011	CPAI-2009-393		CVE-2009-0954	Apple QuickTime Movie File Clipping Region Handling Heap Buffer Overflow (CVE-2009-0954)
High	9 Feb 2010	21 Jun 2011	CPAI-2006-237		CVE-2006-4221	IBM eGatherer ActiveX RunEgatherer Function Buffer Overflow (CVE-2006-4221)
Critical	10 Aug 2010	21 Jun 2011	CPAI-2010-236		CVE-2010-1901	Microsoft Word RTF Parsing Engine Memory Corruption (MS10-056; CVE-2010-1901)
Critical	26 Dec 2010	30 Dec 2010	CPAI-2010-351	Microsoft Security Research & Defense Microsoft Security Bulletin MS11-004	CVE-2010-3972	Preemptive Protection against Microsoft IIS FTP Server Telnet IAC Buffer Overflow Vulnerability (MS11-004)
Critical	29 Dec 2010	29 Dec 2010	CPAI-2010-352		CVE-2010-3127	Adobe Photoshop CS5 Insecure Library Loading Code Execution (APSB10-30; CVE-2010-3127)
Critical	23 Dec 2010	23 Dec 2010	CPAI-2010-349		CVE-2010-3971	Internet Explorer CSS Recursive Import Memory Corruption (CVE-2010-3971)
High	22 Dec 2010	22 Dec 2010	CPAI-2010-345		CVE-2010-3646	Adobe Flash Player DefineFunction2 Memory Corruption (APSB10-26; CVE-2010-3646)
N/A	15 Dec 2010	15 Dec 2010	SBP-2010-34		CVE-2010-0102	DCE-RPC Fragmented Requests (CVE-2010-0102)
Critical	15 Dec 2010	15 Dec 2010	SBP-2010-33		CVE-2010-0102	DCE-RPC Invalid NDR Value Evasion Technique (CVE-2010-0102)
N/A	15 Dec 2010	15 Dec 2010	SBP-2010-35		CVE-2010-0102	MS-RPC over CIFS Fragmentation (CVE-2010-0102)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-331		CVE-2010-3343	Internet Explorer 6 HTML Object Memory Corruption (MS10-090; CVE-2010-3343)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-332		CVE-2010-3340	Internet Explorer HTML Object use after free Memory Corruption (MS10-090; CVE-2010-3340)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-344		CVE-2010-3144	Microsoft Internet Connection Signup Wizard Insecure DLL Loading (MS10-097; CVE-2010-3144)
High	14 Dec 2010	14 Dec 2010	CPAI-2010-336		CVE-2010-3946	Microsoft Graphics Filters PICT Image Converter Integer Overflow (MS10-105; CVE-2010-3946)
High	14 Dec 2010	14 Dec 2010	CPAI-2010-334		CVE-2010-3952	Microsoft Graphics Filters FlashPix Converter Heap Corruption (MS10-105; CVE-2010-3952)
High	14 Dec 2010	14 Dec 2010	CPAI-2010-335		CVE-2010-3951	Microsoft Graphics Filters FlashPix Converter Buffer Overflow (MS10-105; CVE-2010-3951)
High	14 Dec 2010	14 Dec 2010	CPAI-2010-328		CVE-2010-3949 CVE-2010-3950	Microsoft Graphics Filters TIFF Image Converter Buffer Overflow (MS10-105; CVE-2010-3949; CVE-2010-3950)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-333		CVE-2010-3959	Microsoft OpenType Font Format Driver CMAP Table Code Execution (MS10-091; CVE-2010-3959)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-342		CVE-2010-3966	Microsoft Windows BranchCache Insecure Library Loading (MS10-095; CVE-2010-3966)
Critical	14 Dec 2010	14 Dec 2010	CPAI-2010-343		CVE-2010-3965	Microsoft Windows Media Encoder Insecure Library Loading (MS10-094; CVE-2010-3965)
Medium	12 Dec 2010	12 Dec 2010	CPAI-2009-444		CVE-2009-3869	Sun Java Runtime AWT setDifflCM Stack Buffer Overflow (CVE-2009-3869)
High	8 Dec 2010	8 Dec 2010	CPAI-2010-446		CVE-2010-0112	Symantec IM Manager rdpageimlogic.aspx Multiple SQL Injections (CVE-2010-0112)
High	12 Oct 2010	3 Dec 2010	SBP-2010-27	Microsoft Security Bulletin MS10-080	CVE-2010-3230	Workaround for Microsoft Excel CrErr BIFF Record Parsing Integer Overflow Vulnerability (MS10-080)
High	2 Dec 2010	2 Dec 2010	CPAI-2010-320		CVE-2010-4142	RealFlex RealWin SCADA SCPC_INITIALIZE Buffer Overflow (CVE-2010-4142)
High	2 Dec 2010	2 Dec 2010	CPAI-2010-319		CVE-2010-2572	Microsoft PowerPoint Legacy File Parsing Memory Corruption (MS10-088; CVE-2010-2572)
High	25 Nov 2010	25 Nov 2010	SBP-2010-31			DCE-RPC Big Endian Evasion Technique
High	18 Nov 2010	18 Nov 2010	CPAI-2010-433		CVE-2010-0112	Symantec IM Manager IMAdminScheduleReport.asp SQL Injection (CVE-2010-0112)
High	17 Nov 2010	17 Nov 2010	CPAI-2010-434		CVE-2010-0112	Symantec IM Manager LoggedInUsers.lgx Definition File SQL Injections (CVE-2010-0112)
Critical	15 Nov 2010	15 Nov 2010	CPAI-2010-448		CVE-2010-3069	Samba SID Parsing Stack Buffer Overflow (CVE-2010-3069)
High	9 Nov 2010	11 Nov 2010	CPAI-2010-312	Microsoft Security Bulletin MS10-089	CVE-2010-2733 CVE-2010-2734 CVE-2010-3936	Preemptive Protection against Multiple Microsoft Forefront UAG Cross-Site Scripting Vulnerabilities (MS10-089)
High	9 Nov 2010	9 Nov 2010	CPAI-2010-313		CVE-2010-2732	Microsoft Frorefront UAG Redirection Spoofing (MS10-089; CVE-2010-2732)
High	9 Nov 2010	9 Nov 2010	CPAI-2010-282		CVE-2010-2750	Microsoft Word Unchecked Index Value Remote Code Execution (MS10-079; CVE-2010-2750)
Critical	9 Nov 2010	9 Nov 2010	CPAI-2010-311		CVE-2010-3337	Microsoft PowerPoint DLL Planting Code Execution (MS10-087; CVE-2010-3337)
Critical	9 Nov 2010	9 Nov 2010	CPAI-2010-365			HP Data Protector Media Operations SignInName Parameter Overflow
High	8 Nov 2010	8 Nov 2010	CPAI-2010-406		CVE-2010-2872	Adobe Shockwave Director PAMI Chunk Parsing Memory Corruption (CVE-2010-2872)
High	3 Nov 2010	3 Nov 2010	CPAI-2010-360		CVE-2010-3490	FreePBX Recording Interface File Upload Code Execution (CVE-2010-3490)
Critical	2 Nov 2010	2 Nov 2010	CPAI-2007-297		CVE-2007-3825	CA Alert Notification Server RPC Request Buffer Overflow (CVE-2007-3825)
High	1 Nov 2010	1 Nov 2010	CPAI-2010-304		CVE-2010-3654	Adobe Flash Player Flash Content Parsing Code Execution (APSA10-05; CVE-2010-3654)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-302		CVE-2010-4088	Adobe Shockwave Player Duplicate Keys Memory Corruption (APSB10-25; CVE-2010-4088)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-303		CVE-2010-4089	Adobe Shockwave Player Duplicate LSCM Records Memory Corruption (APSB10-25; CVE-2010-4089)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-300		CVE-2010-4084 CVE-2010-4086	Adobe Shockwave Player MMAP Entry Size Memory Corruption (APSB10-25; CVE-2010-4084; CVE-2010-4086)
High	28 Oct 2010	28 Oct 2010	CPAI-2010-301		CVE-2010-4087	Adobe Shockwave Player CSWV Record Length Memory Corruption (APSB10-25; CVE-2010-4087)
High	27 Oct 2010	27 Oct 2010	CPAI-2010-366			HP Data Protector Media Operations Denial of Service
Critical	27 Oct 2010	27 Oct 2010	CPAI-2010-299		CVE-2010-3653	Adobe Shockwave Director rcsL Chunk Remote Code Execution (APSA10-04; CVE-2010-3653)
High	24 Oct 2010	24 Oct 2010	CPAI-2006-308		CVE-2006-3876	Microsoft PowerPoint Malformed Data Record Code Execution (MS06-058; CVE-2006-3876)
High	20 Oct 2010	20 Oct 2010	CPAI-2010-285		CVE-2010-3214	Microsoft Word UPX Data Stack Validation Buffer Overflow (MS10-079; CVE-2010-3214)
High	18 Oct 2010	18 Oct 2010	SBP-2011-01			Javascript eval Case Sensitivity Obfuscation
High	18 Oct 2010	18 Oct 2010	CPAI-2008-249		CVE-2008-0467	Firebird Database Server Username Handling Buffer Overflow (CVE-2008-0467)