Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	16 Apr 2012	3 Mar 2013	CPAI-2012-138		CVE-2011-5001	Trend Micro Control Manager CmdProcessor.exe AddTask Stack Buffer Overflow (CVE-2011-5001)
High	14 Oct 2012	24 Feb 2013	CPAI-2012-368		CVE-2012-2695	Ruby on Rails Hash SQL Injection (CVE-2012-2695)
Critical	30 Dec 2012	24 Feb 2013	CPAI-2012-1314		CVE-2012-5267	Adobe Flash Player JPEG Parsing Buffer Overflow (APSB22-12; CVE-2012-5267)
Medium	31 Dec 2012	20 Feb 2013	CPAI-2012-641			Wibu-Systems WibuKey Runtime for Windows ActiveX Control Buffer Overflow
High	16 Dec 2012	19 Feb 2013	CPAI-2013-413		CVE-2012-4347	Symantec Messaging Gateway Directory Traversal (CVE-2012-4347)
Critical	28 May 2012	27 Jan 2013	CPAI-2012-243		CVE-2011-5007	SCADA Smart Software Solutions CoDeSys ControlService Stack Buffer Overflow (CVE-2011-5007)
High	2 Jan 2012	20 Jan 2013	CPAI-2013-033		CVE-2011-3414	Microsoft ASP.NET and PHP Hash Collision Denial of Service - Specific (CVE-2011-3414)
Critical	2 Jul 2012	20 Jan 2013	CPAI-2012-291		CVE-2012-1569	GnuTLS libtasn1 ASN1 Length DER Decoding Buffer Overflow (CVE-2012-1569)
High	23 Dec 2012	20 Jan 2013	CPAI-2012-1318			EZHomeTech EzServer Stack Buffer Overflow
High	2 Dec 2012	17 Jan 2013	CPAI-2012-823		CVE-2012-3753	Apple QuickTime Plugin Content-Type Buffer Overflow (CVE-2012-3753)
High	23 Dec 2012	17 Jan 2013	CPAI-2012-1323			Lattice Semiconductor ispVM System XCF File Handling Overflow
Medium	5 Mar 2012	15 Jan 2013	CPAI-2012-078		CVE-2009-0195	CUPS and Xpdf PDF JBIG2 Symbol Dictionary Buffer Overflow (CVE-2009-0195)
High	9 Oct 2012	14 Jan 2013	CPAI-2012-630		CVE-2012-2550	Microsoft Works RTF Heap Remote Code Execution (MS12-065; CVE-2012-2550)
High	27 Dec 2012	3 Jan 2013	CPAI-2012-1334			Novell Sentinel Log Manager Retention Policy Security Restriction Bypass
Critical	13 Dec 2012	2 Jan 2013	CPAI-2012-1303		CVE-2011-4516	Oracle Outside In JPEG 2000 Parameter Heap Buffer Overflow (CVE-2011-4516)
Critical	24 Jan 2012	31 Dec 2012	CPAI-2012-034		CVE-2007-2446	Samba SRVSVC RPC sec_io_acl Request Handling Heap Buffer Overflow (CVE-2007-2446)
High	31 Dec 2012	31 Dec 2012	CPAI-2012-1304		CVE-2012-0659	Apple QuickTime MPEG Stream Padding Code Execution (CVE-2012-0659)
High	30 Dec 2012	30 Dec 2012	CPAI-2012-1131		CVE-2009-1730	Ipswitch TFTP Server Information disclosure (CVE-2009-1730)
Critical	26 Dec 2012	27 Dec 2012	CPAI-2012-1327			SCADA Schneider Modicon Quantum Password Recovery
Critical	26 Dec 2012	27 Dec 2012	CPAI-2012-1328			SCADA Siemens FactoryLink vrn.exe Opcode 9 Buffer Overflow
Critical	27 Dec 2012	27 Dec 2012	CPAI-2012-1332			Schneider Modicon SCADA Ladder Logic Upload/Download
Critical	26 Dec 2012	26 Dec 2012	CPAI-2012-1329			Sielco Sistemi Winlog SCADA Remote File Access
Critical	23 Dec 2012	23 Dec 2012	CPAI-2012-1137		CVE-2010-3332	Microsoft ASP.NET PKCS Padding Information Disclosure (MS10-070; CVE-2010-3332)
High	16 Dec 2012	16 Dec 2012	CPAI-2012-1287		CVE-2012-5533	lighttpd Connection Header Parsing Denial of Service (CVE-2012-5533)
High	16 Dec 2012	16 Dec 2012	CPAI-2012-1296			General Electric D20 Password Recovery
Critical	4 Dec 2012	13 Dec 2012	CPAI-2012-1280		CVE-2012-5611	MySQL acl_get Buffer Overrun Remote Code Execution (CVE-2012-5611)
Medium	11 Dec 2012	11 Dec 2012	CPAI-2012-1290		CVE-2011-1140	Wireshark CLDAP Dissector Denial of Service (CVE-2011-1140)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1261		CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8Address (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1258		CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8Client (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1254		CVE-2012-1537	Microsoft DirectPlay CLSID_DP8SP_MODEM (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1259		CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8LobbyClient (MS12-082; CVE-2012-1537)
High	4 Nov 2012	6 Dec 2012	CPAI-2012-800		CVE-2012-5671	Exim DKIM DNS Decoding Buffer Overflow (CVE-2012-5671)
Critical	14 Oct 2012	4 Dec 2012	CPAI-2012-422			Oracle Fusion Middleware Outside In Excel File Parsing Integer Overflow
High	3 Dec 2012	3 Dec 2012	CPAI-2012-835	CVE-2011-4050	CVE-2011-4050	7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050)
High	1 Dec 2012	3 Dec 2012	CPAI-2012-825		CVE-2012-2972	CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972)
High	3 Dec 2012	3 Dec 2012	CPAI-2012-831		CVE-2011-3486	Beckhoff TwinCAT Out-Of-Bounds Read Denial of Service (CVE-2011-3486)
High	14 Oct 2012	2 Dec 2012	CPAI-2012-721		CVE-2010-4142	DATAC RealWin SCADA Server SCPC Buffer Overflow (CVE-2010-4142)
High	25 Nov 2012	25 Nov 2012	CPAI-2012-383		CVE-2011-0517	Sielco Sistemi Winlog Server Buffer Overflow (CVE-2011-0517)
High	18 Nov 2012	18 Nov 2012	CPAI-2012-663		CVE-2011-4963	Nginx Location NTFS Extended Attributes Security Bypass (CVE-2011-4963)
Critical	18 Nov 2012	18 Nov 2012	CPAI-2012-638			HP SiteScope Multiple Directory Traversal Vulnerabilities
Medium	18 Nov 2012	18 Nov 2012	CPAI-2012-797		CVE-2012-1686	Oracle Business Intelligence Enterprise Edition Cross Site Scripting (CVE-2012-1686)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-804		CVE-2012-4776	Microsoft .Net Framework Web Proxy Auto-Discovery Code Execution (MS12-074; CVE-2012-4776)
N/A	13 Nov 2012	13 Nov 2012	CPAI-2012-756			SCADA DNP3 Non-Compliant requests
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-793		CVE-2012-2519	Microsoft .NET Framework Insecure Library Loading Code Execution (MS12-074; CVE-2012-2519)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-802		CVE-2012-1887	Microsoft Excel SST Invalid Length Use After Free (MS12-076; CVE-2012-1887)
Critical	13 Nov 2012	13 Nov 2012	CPAI-2012-795		CVE-2012-2543	Microsoft Excel Modified Data Structure Stack Overflow (MS12-076; CVE-2012-2543)
N/A	13 Nov 2012	13 Nov 2012	CPAI-2012-769			SCADA DNP3 unauthorized client
Critical	7 Nov 2012	11 Nov 2012	CPAI-2012-808		CVE-2012-1527 CVE-2012-1528	Microsoft Windows Briefcase Integer Underflow (MS12-072; CVE-2012-1527; CVE-2012-1528)
High	4 Nov 2012	4 Nov 2012	CPAI-2012-778			Rockwell RNA Message Negative Body Length
High	4 Nov 2012	4 Nov 2012	CPAI-2012-779			Rockwell RNA Message Header Not Null Terminated