Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	4 Nov 2012	4 Nov 2012	CPAI-2012-776		Rockwell RNA Message Negative Header Length
High	4 Nov 2012	4 Nov 2012	CPAI-2012-777		Rockwell RNA Message Large Body Length - 8Mb
High	4 Nov 2012	4 Nov 2012	CPAI-2012-775		Rockwell RNA Message Large Header Length - 8Kb
High	2 Dec 2012	4 Nov 2012	CPAI-2012-798		CYME Multiple Products ChartFX.ClientServer.Core.dll Remote Code Execution
High	23 Oct 2012	23 Oct 2012	CPAI-2012-669		IGSS SCADA Write File Function Buffer Overflow
High	21 Oct 2012	21 Oct 2012	CPAI-2012-415	CVE-2011-1986	Microsoft Office Excel Record Parsing Use After Free (MS11-072; CVE-2011-1986)
Medium	23 Jul 2012	16 Oct 2012	CPAI-2012-288	CVE-2012-1923	RealNetworks Helix Server SNMP Master Agent Open-PDU Denial of Service (CVE-2012-1923)
High	25 Nov 2012	16 Oct 2012	CPAI-2012-787	CVE-2012-2995	Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)
Critical	15 Oct 2012	15 Oct 2012	CPAI-2012-648	CVE-2012-2998	Trend Micro Control Manager ad hoc query Module SQL Injection (CVE-2012-2998)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-425	CVE-2012-2174	IBM Lotus Notes URL Handler Command Execution (CVE-2012-2174)
Medium	14 Oct 2012	14 Oct 2012	CPAI-2012-633	CVE-2012-2516	GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution (CVE-2012-2516)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-709		RealWin SCADA Server DATAC Login Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-691		DATAC RealWin SCADA Server 2 On FC CONNECT FCS a FILE Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-387	CVE-2011-3068	Google Chrome and Apple Safari Runin Handling Use After Free (CVE-2011-3068)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-396	CVE-2012-2574	Symantec Web Gateway blocked.php Blind SQL Injection (CVE-2012-2574)
Critical	14 Oct 2012	14 Oct 2012	CPAI-2012-364	CVE-2012-1744	Oracle Outside In FlashPix Image Processing Heap Buffer Overflow (CVE-2012-1744)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-603		HP SiteScope SOAP Call APISiteScopeImpl Multiple Information Disclosures
High	14 Oct 2012	14 Oct 2012	CPAI-2012-369	CVE-2012-2514	SAP NetWeaver DiagiEventSource Denial of Service (CVE-2012-2514)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-695		IGSS SCADA ListAll Function Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-316	CVE-2012-0942	RealNetworks Helix Server rn5auth Credential Parsing Buffer Overflow (CVE-2012-0942)
High	14 Oct 2012	14 Oct 2012	CPAI-2012-724		DATAC RealWin SCADA Server Buffer Overflow
High	14 Oct 2012	14 Oct 2012	CPAI-2012-608		HP SiteScope loadFileContent SOAP Request Information Disclosure
High	14 Oct 2012	14 Oct 2012	CPAI-2012-726		Sielco Sistemi Winlog Buffer Overflow
Critical	14 Oct 2012	14 Oct 2012	CPAI-2012-421	CVE-2012-0409	EMC AutoStart ftAgent.exe Null Byte Write (CVE-2012-0409)
High	9 Oct 2012	11 Oct 2012	CPAI-2012-629	CVE-2012-2528	Microsoft Office RTF File listid Use-After-Free Code Execution (MS12-064; CVE-2012-2528)
High	8 May 2012	9 Oct 2012	CPAI-2012-190	CVE-2012-0167	Microsoft Windows GDI+ EMF Heap Overflow (MS12-034; CVE-2012-0167)
High	9 Oct 2012	9 Oct 2012	CPAI-2012-631	CVE-2012-2552	Microsoft SQL Server Report Manager Elevation of Privilege (MS12-070; CVE-2012-2552)
Critical	23 Sep 2012	23 Sep 2012	CPAI-2012-401	CVE-2011-1907	ISC BIND RRSIG Query Denial of Service (CVE-2011-1907)
High	23 Sep 2012	23 Sep 2012	CPAI-2012-324	CVE-2011-4188	Novell iManager Create Attribute EnteredAttrName Buffer Overflow (CVE-2011-4188)
Critical	20 Aug 2012	19 Sep 2012	CPAI-2012-417	CVE-2012-4157	Adobe Acrobat and Reader Embedded TTF Memory Corruption (APSB12-16; CVE-2012-4157)
Critical	17 Sep 2012	17 Sep 2012	CPAI-2012-418	CVE-2012-4154	Adobe Acrobat and Reader Embedded TTF Integer Overflow (APSB12-16; CVE-2012-4154)
Critical	17 Sep 2012	17 Sep 2012	CPAI-2012-416	CVE-2012-4155	Adobe Acrobat and Reader Embedded Font Memory Corruption (APSB12-16; CVE-2012-4155)
Critical	17 Sep 2012	17 Sep 2012	CPAI-2012-419	CVE-2012-4159	Adobe Acrobat and Reader Invalid Memory Access Code Execution (APSB12-16; CVE-2012-4159)
Medium	30 Jul 2012	4 Sep 2012	CPAI-2012-326	CVE-2011-4404	VMWare Update Manager 4 Directory Traversal (CVE-2011-4404)
Medium	3 Aug 2012	4 Sep 2012	CPAI-2012-367		VMWare Update Manager Directory Traversal
High	3 Sep 2012	3 Sep 2012	CPAI-2012-334	CVE-2012-2763	Gimp Script-Fu Server Buffer Overflow (CVE-2012-2763)
Medium	3 Sep 2012	3 Sep 2012	CPAI-2012-394	CVE-2011-2592	Citrix Access Gateway nsepacom ActiveX Control Buffer Overflow (CVE-2011-2592)
High	3 Sep 2012	3 Sep 2012	CPAI-2012-366	CVE-2012-0667	Apple QuickTime QTVR QTVRStringAtom Parsing Buffer Overflow (CVE-2012-0667)
High	27 Aug 2012	27 Aug 2012	CPAI-2012-345	CVE-2012-0469	Mozilla Multiple Products IDBKeyRange Use-After-Free (CVE-2012-0469)
Critical	27 Aug 2012	27 Aug 2012	CPAI-2012-360	CVE-2007-1447	CA BrightStor ARCserve Backup Tape Engine RPC Procedure Memory Corruption (CVE-2007-1447)
High	27 Aug 2012	27 Aug 2012	CPAI-2012-395	CVE-2012-2030	Adobe Shockwave Player Chunk Parsing Uninitialized Object Access (APSB12-13; CVE-2012-2030)
Critical	21 Aug 2012	21 Aug 2012	CPAI-2012-362	CVE-2012-4150	Adobe Reader JBIG2 File Memory Corruption (APSB12-16; CVE-2012-4150)
High	20 Aug 2012	20 Aug 2012	CPAI-2012-391	CVE-2012-1525	Adobe Reader PDF File XSLT Processing Code Execution (APSB12-16; CVE-2012-1525)
Critical	20 Aug 2012	20 Aug 2012	CPAI-2012-357	CVE-2012-4153	Adobe Reader Malformed Entries Memory Corruption (APSB12-16; CVE-2012-4153)
Critical	20 Aug 2012	20 Aug 2012	CPAI-2012-229	CVE-2011-4516	Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)
High	18 Aug 2012	18 Aug 2012	CPAI-2012-388	CVE-2012-4148	Adobe Acrobat PDF File NULL Pointer Dereference Code Execution (APSB12-16; CVE-2012-4148)
Medium	30 Jul 2012	30 Jul 2012	CPAI-2012-299	CVE-2012-1196	LANDesk ThinkManagement Suite SetTaskLogByFile Arbitrary File Deletion (CVE-2012-1196)
High	30 Jul 2012	30 Jul 2012	CPAI-2012-325	CVE-2005-0563	Microsoft Outlook Exchange Server Cross-Site Scripting (MS05-029; CVE-2005-0563)
High	14 Oct 2012	30 Jul 2012	CPAI-2012-280	CVE-2012-0551	Oracle GlassFish Enterprise Server Multiple Reflected XSS Vulnerabilities (CVE-2012-0551)
High	2 Jul 2012	16 Jul 2012	CPAI-2012-294	CVE-2012-0719	IBM Tivoli Endpoint Manager Web Reports ScheduleParam Cross-site Scripting (CVE-2012-0719)