Home / 2010 Advisories Archive

2010 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
N/A	14 Mar 2010	14 Mar 2010	CPAI-2005-295	CVE-2005-2920	UPX Compressed PE Executable Files (CVE-2005-2920)
Critical	11 Mar 2010	11 Mar 2010	CPAI-2004-155	CVE-2004-0668	IBM Lotus Domino Web Access Message Handling Denial of Service (CVE-2004-0668)
High	11 Mar 2010	11 Mar 2010	CPAI-2004-193	CVE-2005-0053	Internet Explorer Drag and Drop Code Execution (CVE-2005-0053)
High	10 Mar 2010	10 Mar 2010	CPAI-2004-126	CVE-2004-0364	Norton Internet Security ActiveX Command Execution (CVE-2004-0364)
High	10 Mar 2010	10 Mar 2010	CPAI-2008-333	CVE-2008-3734	Ipswitch WS_FTP Client Format String (CVE-2008-3734)
High	9 Mar 2010	9 Mar 2010	CPAI-2009-454		Sun MySQL Database PROCEDURE ANALYSE Denial of Service
High	9 Mar 2010	9 Mar 2010	CPAI-2010-047	CVE-2010-0264	Microsoft Excel DbOrParamQry Record Parsing Code Execution (MS10-017; CVE-2010-0264)
Critical	9 Mar 2010	9 Mar 2010	CPAI-2009-385	CVE-2009-0991	Oracle Database DBMS TNS Listener Denial of Service (CVE-2009-0991)
High	9 Mar 2010	9 Mar 2010	CPAI-2010-042	CVE-2010-0258	Microsoft Excel Sheet Object Type Confusion (MS10-017; CVE-2010-0258)
High	9 Mar 2010	9 Mar 2010	CPAI-2010-046	CVE-2010-0263	Microsoft Excel XLSX File Parsing Code Execution (MS10-017; CVE-2010-0263)
High	9 Mar 2010	9 Mar 2010	CPAI-2010-043	CVE-2010-0260 CVE-2010-0261	Microsoft Excel MDXTUPLE and MDXSET Records Heap Overflow (MS10-017; CVE-2010-0260; CVE-2010-0261)
High	9 Mar 2010	9 Mar 2010	CPAI-2009-453		Sun MySQL Database SELECT Subquery Denial of Service
High	8 Mar 2010	8 Mar 2010	CPAI-2008-371	CVE-2008-4813	Adobe Acrobat PDF Font Processing Memory Corruption (CVE-2008-4813)
High	8 Mar 2010	8 Mar 2010	CPAI-2006-180	CVE-2006-0749	Mozilla Firefox Tag Order Memory Corruption (CVE-2006-0749)
High	8 Mar 2010	8 Mar 2010	CPAI-2007-350	CVE-2007-6026	Microsoft Office Jet Engine MDB File Parsing Buffer Overflow (CVE-2007-6026)
Low	4 Mar 2010	4 Mar 2010	CPAI-2004-124		InterWoven WorkDocs XSS Cross-Site Scripting
High	4 Mar 2010	4 Mar 2010	CPAI-2006-248	CVE-2006-2779	Mozilla Firefox DOMNodeRemoved Memory Corruption (CVE-2006-2779)
High	4 Mar 2010	4 Mar 2010	CPAI-2006-324	CVE-2006-2934	Linux Kernel SCTP Chunkless Packet Denial of Service (CVE-2006-2934)
High	3 Mar 2010	3 Mar 2010	CPAI-2008-320	CVE-2008-3111	Sun Java Web Start JNLP java-vm-args Heap Buffer Overflow (CVE-2008-3111)
Critical	3 Mar 2010	3 Mar 2010	CPAI-2004-104	CVE-2003-1200	MDaemon Raw Message Handler Buffer Overflow (CVE-2003-1200)
Critical	2 Mar 2010	2 Mar 2010	CPAI-2006-186	CVE-2006-2081	Oracle Database Server DBMS_EXPORT_EXTENSION Package Privilege Escalation (CVE-2006-2081)
Critical	2 Mar 2010	2 Mar 2010	CPAI-2010-049	CVE-2010-0483	Microsoft VBScript MsgBox Call with Malicious HLP File (CVE-2010-0483)
Critical	2 Mar 2010	2 Mar 2010	CPAI-2009-467	CVE-2009-0065	Linux Kernel SCTP FWD-TSN Handling Buffer Overflow (CVE-2009-0065)
N/A	28 Feb 2010	1 Mar 2010	SBP-2010-11	CVE-2010-0232 CVE-2011-2003	Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)
High	1 Mar 2010	1 Mar 2010	CPAI-2005-301	CVE-2005-2701	Firefox XBM Image Processing Buffer Overflow (CVE-2005-2701)
Critical	28 Feb 2010	28 Feb 2010	CPAI-2005-357	CVE-2004-0791	Multiple Vendor ICMP Source Quench Denial of Service (CVE-2004-0791)
Medium	25 Feb 2010	25 Feb 2010	CPAI-2008-244	CVE-2008-0006	X.Org X Server PCF Font Parser Buffer Overflow (CVE-2008-0006)
High	24 Feb 2010	24 Feb 2010	CPAI-2007-296	CVE-2007-3826	Internet Explorer OnBeforeUnload JavaScript Address Bar Spoofing (MS07-057; CVE-2007-3826)
High	24 Feb 2010	24 Feb 2010	CPAI-2007-352	CVE-2007-5959	Mozilla Firefox Layout Frame Constructor Memory Corruption (CVE-2007-5959)
Medium	24 Feb 2010	24 Feb 2010	CPAI-2006-163	CVE-2006-0981	WinACE RAR and TAR Directory Traversal (CVE-2006-0981)
Critical	24 Feb 2010	24 Feb 2010	CPAI-2004-181	CVE-2004-1546	MDaemon SMTP and IMAP Command Buffer Overflow (CVE-2004-1546)
Critical	23 Feb 2010	23 Feb 2010	CPAI-2004-188	CVE-2004-0840	Microsoft SMTP Server DNS Handling (MS04-035; CVE-2004-0840)
High	23 Feb 2010	23 Feb 2010	CPAI-2006-254	CVE-2006-3228	Nullsoft Winamp Midi File Header Handling Buffer Overflow (CVE-2006-3228)
Medium	23 Feb 2010	23 Feb 2010	CPAI-2006-305	CVE-2006-4511	Novell GroupWise Messenger HTTP POST Request Invalid Memory Access (CVE-2006-4511)
High	23 Feb 2010	23 Feb 2010	CPAI-2004-175	CVE-2004-0573	Microsoft WordPerfect 5.x Converter Buffer Overflow (CVE-2004-0573)
High	23 Feb 2010	23 Feb 2010	CPAI-2006-230	CVE-2006-3961	McAfee Subscription Manager ActiveX Stack Buffer Overflow (CVE-2006-3961)
Critical	23 Feb 2010	23 Feb 2010	CPAI-2007-287	CVE-2007-3454	Trend Micro OfficeScan Console Authentication Buffer Overflow (CVE-2007-3454)
High	22 Feb 2010	22 Feb 2010	CPAI-2008-323	CVE-2008-3066	RealNetworks RealPlayer ActiveX Import Method Buffer Overflow (CVE-2008-3066)
High	22 Feb 2010	22 Feb 2010	CPAI-2005-239	CVE-2005-1496	Oracle Database DBMS_Scheduler Privilege Escalation (CVE-2005-1496)
High	22 Feb 2010	22 Feb 2010	CPAI-2008-338	CVE-2008-3892	VMware COM API ActiveX Control Buffer Overflow (CVE-2008-3892)
Medium	22 Feb 2010	22 Feb 2010	CPAI-2004-165	CVE-2004-0636	AOL Instant Messenger Away Message Buffer Overflow (CVE-2004-0636)
Medium	22 Feb 2010	22 Feb 2010	CPAI-2006-314	CVE-2006-6603	Yahoo Messenger YMailAttach ActiveX Control Buffer Overflow (CVE-2006-6603)
High	22 Feb 2010	22 Feb 2010	CPAI-2008-254	CVE-2007-5659	Adobe Multiple Products PDF JavaScript Method Buffer Overflow (CVE-2007-5659)
High	22 Feb 2010	22 Feb 2010	CPAI-2007-228	CVE-2007-0494	ISC BIND DNSSEC Validation Multiple RRsets Denial of Service (CVE-2007-0494)
Critical	22 Feb 2010	22 Feb 2010	CPAI-2010-038		Botnet: Kneber
High	21 Feb 2010	21 Feb 2010	CPAI-2007-302	CVE-2007-3944	Apple Safari Regular Expression Heap Buffer Overflow (CVE-2007-3944)
Medium	21 Feb 2010	21 Feb 2010	CPAI-2006-245	CVE-2006-2838	F-Secure Products Web Console Buffer Overflow (CVE-2006-2838)
Medium	21 Feb 2010	21 Feb 2010	CPAI-2008-288	CVE-2008-1786	CA Multiple Products gui_cm_ctrls ActiveX Control Memory Corruption (CVE-2008-1786)
Critical	18 Feb 2010	18 Feb 2010	CPAI-2005-341	CVE-2004-1134	Microsoft ISAPI W3Who Library Buffer Overflow (CVE-2004-1134)
Medium	18 Feb 2010	18 Feb 2010	CPAI-2004-195		Internet Explorer Status Bar URL Spoofing