Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	14 Oct 2012	4 Dec 2012	CPAI-2012-422			Oracle Fusion Middleware Outside In Excel File Parsing Integer Overflow
High	3 Dec 2012	3 Dec 2012	CPAI-2012-835	CVE-2011-4050	CVE-2011-4050	7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050)
High	1 Dec 2012	3 Dec 2012	CPAI-2012-825		CVE-2012-2972	CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972)
High	3 Dec 2012	3 Dec 2012	CPAI-2012-831		CVE-2011-3486	Beckhoff TwinCAT Out-Of-Bounds Read Denial of Service (CVE-2011-3486)
High	14 Oct 2012	2 Dec 2012	CPAI-2012-721		CVE-2010-4142	DATAC RealWin SCADA Server SCPC Buffer Overflow (CVE-2010-4142)
Critical	29 Nov 2012	29 Nov 2012	CPAI-2012-1134		CVE-2012-5272	Adobe Flash Player Plugin Use-After-Free Code Execution (APSB12-22; CVE-2012-5272)
High	25 Nov 2012	25 Nov 2012	CPAI-2012-383		CVE-2011-0517	Sielco Sistemi Winlog Server Buffer Overflow (CVE-2011-0517)
Critical	14 Aug 2012	18 Nov 2012	CPAI-2012-340		CVE-2012-1526	Internet Explorer Layout Memory Corruption (MS12-052; CVE-2012-1526)
High	18 Nov 2012	18 Nov 2012	CPAI-2012-663		CVE-2011-4963	Nginx Location NTFS Extended Attributes Security Bypass (CVE-2011-4963)
Critical	18 Nov 2012	18 Nov 2012	CPAI-2012-638			HP SiteScope Multiple Directory Traversal Vulnerabilities
Medium	18 Nov 2012	18 Nov 2012	CPAI-2012-797		CVE-2012-1686	Oracle Business Intelligence Enterprise Edition Cross Site Scripting (CVE-2012-1686)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-807		CVE-2012-4775	Microsoft Internet Explorer CTreeNode Use After Free (MS12-071; CVE-2012-4775)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-804		CVE-2012-4776	Microsoft .Net Framework Web Proxy Auto-Discovery Code Execution (MS12-074; CVE-2012-4776)
N/A	13 Nov 2012	13 Nov 2012	CPAI-2012-756			SCADA DNP3 Non-Compliant requests
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-793		CVE-2012-2519	Microsoft .NET Framework Insecure Library Loading Code Execution (MS12-074; CVE-2012-2519)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-805		CVE-2012-1538	Microsoft Internet Explorer CFormElement Use After Free (MS12-071; CVE-2012-1538)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-802		CVE-2012-1887	Microsoft Excel SST Invalid Length Use After Free (MS12-076; CVE-2012-1887)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-795		CVE-2012-2543	Microsoft Excel Modified Data Structure Stack Overflow (MS12-076; CVE-2012-2543)
N/A	13 Nov 2012	13 Nov 2012	CPAI-2012-769			SCADA DNP3 unauthorized client
High	13 Nov 2012	12 Nov 2012	CPAI-2012-803		CVE-2012-1539	Microsoft Internet Explorer CTreePos Use After Free (MS12-071; CVE-2012-1539)
Critical	7 Nov 2012	11 Nov 2012	CPAI-2012-808		CVE-2012-1527 CVE-2012-1528	Microsoft Windows Briefcase Integer Underflow (MS12-072; CVE-2012-1527; CVE-2012-1528)
High	4 Nov 2012	4 Nov 2012	CPAI-2012-778			Rockwell RNA Message Negative Body Length
High	4 Nov 2012	4 Nov 2012	CPAI-2012-779			Rockwell RNA Message Header Not Null Terminated
High	4 Nov 2012	4 Nov 2012	CPAI-2012-776			Rockwell RNA Message Negative Header Length
High	4 Nov 2012	4 Nov 2012	CPAI-2012-777			Rockwell RNA Message Large Body Length - 8Mb
High	4 Nov 2012	4 Nov 2012	CPAI-2012-775			Rockwell RNA Message Large Header Length - 8Kb
High	2 Dec 2012	4 Nov 2012	CPAI-2012-798			CYME Multiple Products ChartFX.ClientServer.Core.dll Remote Code Execution
High	29 Oct 2012	29 Oct 2012	CPAI-2012-647		CVE-2012-4168	Adobe Flash Player Flash Plugin Cross-Domain Information Leak (APSB12-19; CVE-2012-4168)
High	29 Oct 2012	29 Oct 2012	CPAI-2012-649		CVE-2012-4171	Adobe Flash Player Multiple Dialog Boxes Denial Of Service (APSB12-19; CVE-2012-4171)
Critical	22 Sep 2012	24 Oct 2012	CPAI-2012-607		CVE-2012-2557	Internet Explorer cloneNode Use After Free Remote Code Execution (MS12-063; CVE-2012-2557)
High	23 Oct 2012	23 Oct 2012	CPAI-2012-669			IGSS SCADA Write File Function Buffer Overflow
Critical	22 Oct 2012	22 Oct 2012	CPAI-2012-639		CVE-2012-4163	Adobe Flash Player Malformed Tag Memory Corruption ( APSB12-19; CVE-2012-4163)
High	22 Oct 2012	22 Oct 2012	CPAI-2012-640		CVE-2012-4165	Adobe Flash Player Malformed Byte Code Remote Code Execution (APSB12-19; CVE-2012-4165)
High	21 Oct 2012	21 Oct 2012	CPAI-2012-415		CVE-2011-1986	Microsoft Office Excel Record Parsing Use After Free (MS11-072; CVE-2011-1986)
Medium	23 Jul 2012	16 Oct 2012	CPAI-2012-288		CVE-2012-1923	RealNetworks Helix Server SNMP Master Agent Open-PDU Denial of Service (CVE-2012-1923)
High	25 Nov 2012	16 Oct 2012	CPAI-2012-787		CVE-2012-2995	Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)
Critical	15 Oct 2012	15 Oct 2012	CPAI-2012-648		CVE-2012-2998	Trend Micro Control Manager ad hoc query Module SQL Injection (CVE-2012-2998)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-425		CVE-2012-2174	IBM Lotus Notes URL Handler Command Execution (CVE-2012-2174)
Medium	14 Oct 2012	14 Oct 2012	CPAI-2012-633		CVE-2012-2516	GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution (CVE-2012-2516)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-709			RealWin SCADA Server DATAC Login Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-691			DATAC RealWin SCADA Server 2 On FC CONNECT FCS a FILE Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-387		CVE-2011-3068	Google Chrome and Apple Safari Runin Handling Use After Free (CVE-2011-3068)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-396		CVE-2012-2574	Symantec Web Gateway blocked.php Blind SQL Injection (CVE-2012-2574)
Critical	14 Oct 2012	14 Oct 2012	CPAI-2012-364		CVE-2012-1744	Oracle Outside In FlashPix Image Processing Heap Buffer Overflow (CVE-2012-1744)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-603			HP SiteScope SOAP Call APISiteScopeImpl Multiple Information Disclosures
High	14 Oct 2012	14 Oct 2012	CPAI-2012-369		CVE-2012-2514	SAP NetWeaver DiagiEventSource Denial of Service (CVE-2012-2514)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-695			IGSS SCADA ListAll Function Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-316		CVE-2012-0942	RealNetworks Helix Server rn5auth Credential Parsing Buffer Overflow (CVE-2012-0942)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-724			DATAC RealWin SCADA Server Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-608			HP SiteScope loadFileContent SOAP Request Information Disclosure