Home / 2011 Advisories Archive

2011 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	27 Dec 2011	27 Dec 2011	CPAI-2011-526	CVE-2007-5107	Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow (CVE-2007-5107)
Critical	22 Dec 2011	22 Dec 2011	CPAI-2011-590	CVE-2011-4369	Adobe Reader and Acrobat PRC Heap Spraying (APSB11-30; CVE-2011-4369)
Critical	8 Mar 2011	20 Dec 2011	CPAI-2011-060	CVE-2011-0567	Adobe Reader Encoded CCITT Decompression Heap Overflow (APSB11-03; CVE-2011-0567)
Critical	8 Mar 2011	20 Dec 2011	CPAI-2011-062	CVE-2011-0560	Adobe Flash Player ActionScript ActionIf Memory Corruption (APSB11-02; CVE-2011-0560)
High	21 Jun 2011	20 Dec 2011	CPAI-2011-312	CVE-2011-2101	Adobe Reader PDF GoToR JavaScript Code Execution (APSB11-16; CVE-2011-2101)
High	21 Jun 2011	20 Dec 2011	CPAI-2011-310	CVE-2011-2099	Adobe Reader PDF 3D Image JavaScript RemoveItem Code Execution (APSB11-16; CVE-2011-2099)
High	12 Jul 2011	20 Dec 2011	CPAI-2011-333	CVE-2011-1284	Microsoft Windows CSRSS SrvWriteConsoleOutput Code Execution (MS11-056; CVE-2011-1284)
Critical	11 Oct 2011	20 Dec 2011	CPAI-2011-467	CVE-2011-1253	Microsoft .Net and Silverlight Framework Remote Code Execution (MS11-078; CVE-2011-1253)
Medium	20 Dec 2011	20 Dec 2011	CPAI-2011-585	CVE-2011-0553	Symantec IM Manager Administrator Interface SQL injection (CVE-2011-0553)
High	20 Dec 2011	20 Dec 2011	CPAI-2011-587	CVE-2011-0554	Symantec IM Manager Administrator Console Code Injection (CVE-2011-0554)
High	20 Dec 2011	20 Dec 2011	CPAI-2011-583	CVE-2011-1897	Microsoft Forefront UAG Default Reflected Cross-site Scripting (MS11-079; CVE-2011-1897)
Critical	1 Nov 2011	13 Dec 2011	CPAI-2011-488		Sybase Open Server Null Byte Stack Memory Corruption
High	13 Dec 2011	13 Dec 2011	CPAI-2011-571	CVE-2011-3412	Microsoft Publisher Malformed File Parsing Memory Corruption (MS11-091; CVE-2011-3412)
High	13 Dec 2011	13 Dec 2011	CPAI-2011-572	CVE-2011-2019	Internet Explorer Insecure Library Loading Code Execution (MS11-089; CVE-2011-2019)
Critical	13 Dec 2011	13 Dec 2011	CPAI-2011-577	CVE-2011-3401	Microsoft Windows Media Player DVR-MS Memory Corruption (MS11-092; CVE-2011-3401)
High	13 Dec 2011	13 Dec 2011	CPAI-2011-566	CVE-2011-1983	Microsoft Word Access Violation Code Execution (MS11-099; CVE-2011-1983)
High	9 Aug 2011	6 Dec 2011	CPAI-2011-355	CVE-2011-1972	Microsoft Office Visio UML Parsing Use After Free (MS11-060; CVE-2011-1972)
Critical	6 Dec 2011	6 Dec 2011	CPAI-2011-559	CVE-2011-2461	Adobe Flex SDK Flex-Generated SWF File Cross-Site Scripting (APSB11-25; CVE-2011-2461)
Critical	6 Dec 2011	6 Dec 2011	CPAI-2011-525		Citrix XenApp and XenDesktop XML Service Interface Stack Buffer Overflow
High	6 Dec 2011	6 Dec 2011	CPAI-2011-427	CVE-2011-2748	ISC DHCP Server Packet Processing Denial of Service (CVE-2011-2748)
High	6 Dec 2011	6 Dec 2011	CPAI-2011-561	CVE-2011-1979	Microsoft Office Visio Global Buffer Overflow (MS11-060; CVE-2011-1979)
Critical	4 Apr 2011	29 Nov 2011	CPAI-2011-228	CVE-2011-0657	Microsoft DNS Resolution LLMNR Query Remote Code Execution (MS11-030; CVE-2011-0657)
High	13 Sep 2011	29 Nov 2011	CPAI-2011-407	CVE-2011-1991	Microsoft Windows Multiple Components Insecure Library Loading (MS11-071; CVE-2011-1991)
Critical	29 Nov 2011	29 Nov 2011	CPAI-2011-549	CVE-2011-2453	Adobe Flash Player Overlapping Records Memory Corruption (APSB11-28; CVE-2011-2453)
Critical	29 Nov 2011	29 Nov 2011	CPAI-2011-550	CVE-2011-2450	Adobe Flash Player PlaceObjectX Type Confusion Code Execution (APSB11-28; CVE-2011-2450)
High	29 Nov 2011	29 Nov 2011	CPAI-2011-473		Trend Micro Control Manager CasLogDirectInsertHandler.cs XSRF
Critical	29 Nov 2011	29 Nov 2011	CPAI-2011-551	CVE-2011-2460	Adobe Flash Player Layered Animation Object Buffer Overflow (APSB11-28; CVE-2011-2460)
High	19 Jul 2011	22 Nov 2011	CPAI-2011-343		Oracle Java Runtime Environment Insecure File Loading
High	1 Nov 2011	22 Nov 2011	CPAI-2011-487	CVE-2011-1453	Apple Safari WebKit SVG Markers Use-After-Free Memory Corruption (CVE-2011-1453)
High	8 Nov 2011	22 Nov 2011	CPAI-2011-516	CVE-2003-0717	Microsoft Windows Messenger Service Buffer Overrun Code Execution (CVE-2003-0717)
Critical	22 Nov 2011	22 Nov 2011	CPAI-2011-545	CVE-2011-2456	Adobe Flash Player ATF Data Buffer Overflow (APSB11-28; CVE-2011-2456)
Critical	22 Nov 2011	22 Nov 2011	CPAI-2011-544	CVE-2011-2457	Adobe Flash Player ActionScript2 Stack Buffer Overflow (APSB11-28; CVE-2011-2457)
Critical	22 Nov 2011	22 Nov 2011	CPAI-2011-542	CVE-2011-2454	Adobe Flash Player Action Tag Buffer Overflow (APSB11-28; CVE-2011-2454)
Critical	22 Nov 2011	22 Nov 2011	CPAI-2011-543	CVE-2011-2455	Adobe Flash Player Ambiguous Namespace Memory Corruption (APSB11-28; CVE-2011-2455)
Critical	22 Nov 2011	22 Nov 2011	CPAI-2011-541	CVE-2011-2451	Adobe Flash Player AVM2 Class Change Memory Corruption (APSB11-28; CVE-2011-2451)
High	22 Nov 2011	22 Nov 2011	CPAI-2011-530	CVE-2007-2918	Logitech VideoCall ActiveX Control Buffer Overflow (CVE-2007-2918)
Critical	22 Nov 2011	22 Nov 2011	CPAI-2011-540	CVE-2011-2445	Adobe Flash Player Flash-plugin Memory Corruption (APSB11-28; CVE-2011-2445)
High	8 Nov 2011	15 Nov 2011	CPAI-2011-514	CVE-2004-0119	Microsoft Windows Negotiate SSP Code Execution (CVE-2004-0119)
Medium	15 Nov 2011	15 Nov 2011	CPAI-2011-524	CVE-2011-2696	libsndfile PAF File Integer Overflow (CVE-2011-2696)
High	15 Nov 2011	15 Nov 2011	CPAI-2011-484	CVE-2006-6063	Un4seen XMPlay Playlist File Name Buffer Overflow (CVE-2006-6063)
High	15 Nov 2011	15 Nov 2011	CPAI-2011-520		Internet Explorer Unsafe Scripting Misconfiguration Code Execution
High	15 Nov 2011	15 Nov 2011	CPAI-2011-517	CVE-2010-3563	Sun Java Web Start BasicServiceImpl Remote Code Execution (CVE-2010-3563)
High	15 Nov 2011	15 Nov 2011	CPAI-2011-493	CVE-2007-0348	Multiple Products IASystemInfo.DLL ActiveX Control Buffer Overflow (CVE-2007-0348)
High	15 Nov 2011	15 Nov 2011	CPAI-2011-494	CVE-2007-5603	SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)
High	15 Nov 2011	15 Nov 2011	CPAI-2011-495	CVE-2007-1689	Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow (CVE-2007-1689)
High	15 Nov 2011	15 Nov 2011	CPAI-2011-521		Symantec Brightmail AntiSpam Nested Zip Handling Denial of Service
High	15 Nov 2011	15 Nov 2011	CPAI-2011-496	CVE-2007-0018	Multiple Products NCTAudioFile2 ActiveX Control Buffer Overflow (CVE-2007-0018)
High	15 Nov 2011	15 Nov 2011	CPAI-2011-509	CVE-2006-6707	McAfee Visual Trace ActiveX Control Buffer Overflow (CVE-2006-6707)
High	14 Aug 2011	1 Nov 2011	CPAI-2011-113	CVE-2011-0321	Preemptive Protection Against EMC NetWorker librpc.dll Security Check Bypass (CVE-2011-0321)
Medium	1 Nov 2011	1 Nov 2011	CPAI-2011-476	CVE-2011-2950	RealNetworks RealPlayer QCP Parsing Buffer Overflow (CVE-2011-2950)