Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	10 Jul 2012	10 Jul 2012	CPAI-2012-263	CVE-2012-1854	Microsoft Visual Basic for Applications Insecure Library Loading (MS12-046; CVE-2012-1854)
Critical	10 Jul 2012	5 Jul 2012	CPAI-2012-304	CVE-2012-0163	Microsoft .NET Framework Parameter Validation Code Execution (MS12-025; CVE-2012-0163)
Critical	2 Jul 2012	2 Jul 2012	CPAI-2012-287	CVE-2012-1675	Oracle Database TNS Listener Service Registration Authentication Weakness (CVE-2012-1675)
Medium	2 Jul 2012	2 Jul 2012	CPAI-2012-295	CVE-2012-0708	IBM Rational ClearQuest CQOle ActiveX Code Execution (CVE-2012-0708)
High	2 Jul 2012	27 Jun 2012	CPAI-2012-285		EMC Data Protection Advisor Denial of Service
High	2 Jul 2012	27 Jun 2012	CPAI-2012-286		Adobe Photoshop TIFF Parsing Heap Buffer Overflow
Medium	25 Jun 2012	25 Jun 2012	CPAI-2012-246	CVE-2012-1709	Oracle WebCenter Forms Recognition ActiveX Control Arbitrary File Creation (CVE-2012-1709)
High	18 Jun 2012	18 Jun 2012	CPAI-2012-238	CVE-2011-1965	Microsoft Windows TCP/IP QOS Denial of Service (MS11-064; CVE-2011-1965)
Critical	18 Jun 2012	13 Jun 2012	CPAI-2012-266	CVE-2011-3176	Novell ZENworks Configuration Management PreBoot Service Buffer Overflow (CVE-2011-3176)
High	29 May 2012	12 Jun 2012	CPAI-2012-245		Microsoft Windows Worm.Win32.Flame.A Information Collection
Critical	12 Jun 2012	12 Jun 2012	CPAI-2012-258	CVE-2012-1879	Internet Explorer insertAdjacentText Remote Code Execution (MS12-037; CVE-2012-1879)
High	12 Jun 2012	12 Jun 2012	CPAI-2012-260	CVE-2012-1857	Microsoft Dynamic AX Enterprise Portal Cross-site Scripting (MS12-040; CVE-2012-1857)
High	12 Jun 2012	12 Jun 2012	CPAI-2012-261	CVE-2012-0018	Microsoft Visio Viewer VSD File Attributes Validation Error (MS12-031; CVE-2012-0018)
High	14 Feb 2012	4 Jun 2012	CPAI-2012-047	CVE-2012-0017	Microsoft SharePoint inplview.aspx Cross-Site Scripting (MS12-011; CVE-2012-0017)
Critical	28 May 2012	28 May 2012	CPAI-2012-241	CVE-2012-0161	Microsoft .NET Framework Serialization Code Execution (MS12-035; CVE-2012-0161)
Critical	28 May 2012	28 May 2012	CPAI-2012-242	CVE-2012-0160	Microsoft .NET Framework Serialization Data Validation Error (MS12-035; CVE-2012-0160)
Critical	28 May 2012	28 May 2012	CPAI-2012-223		CA Total Defense Suite UNCWS exportReport SQL Injection
Critical	14 May 2012	14 May 2012	CPAI-2012-217	CVE-2011-3923	Apache Struts 2 ParametersInterceptor OGNL Command Execution (CVE-2011-3923)
High	14 May 2012	14 May 2012	CPAI-2012-232	CVE-2012-0499	Oracle Java Runtime TTF Heap Buffer Overflow (CVE-2012-0499)
High	10 Jan 2012	10 May 2012	CPAI-2012-017	CVE-2012-0007	Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007; CVE-2012-0007)
High	14 Feb 2012	10 May 2012	CPAI-2012-057	CVE-2012-0136	Microsoft Visio Viewer File Format Code Execution (MS12-015 - CVE-2012-0136)
High	14 Feb 2012	10 May 2012	CPAI-2012-052	CVE-2012-0020	Microsoft Visio Viewer File Format Code Execution (MS12-015 - CVE-2012-0020)
High	14 Feb 2012	10 May 2012	CPAI-2012-055	CVE-2012-0019	Microsoft Visio Viewer VSD File Format Memory Corruption (MS12-015; CVE-2012-0019)
High	10 May 2012	10 May 2012	CPAI-2012-212	CVE-2009-2621	Squid Proxy Invalid HTTP Request Denial of Service (CVE-2009-2621)
High	10 May 2012	10 May 2012	CPAI-2012-213	CVE-2010-3269	Cisco WebEx Player Malformed .WRF File Code Execution (CVE-2010-3269)
Critical	10 May 2012	10 May 2012	CPAI-2012-205	CVE-2012-0870	Samba smbd Packets Infinite Loop Code Execution (CVE-2012-0870)
Critical	10 May 2012	10 May 2012	CPAI-2012-210	CVE-2012-0110	Oracle Outside In Lotus 1-2-3 Heap Buffer Overflow (CVE-2012-0110)
High	10 May 2012	10 May 2012	CPAI-2012-168	CVE-2011-3250	Apple QuickTime JPEG 2000 COD Length Integer Underflow (CVE-2011-3250)
Critical	10 May 2012	10 May 2012	CPAI-2012-177	CVE-2011-4862	Multiple Vendors BSD telnetd Encryption Key Buffer Overflow (CVE-2011-4862)
Critical	10 May 2012	10 May 2012	CPAI-2012-183		Oracle Outside In OOXML Relationship Tag Parsing Stack Buffer Overflow
High	10 May 2012	10 May 2012	CPAI-2012-175	CVE-2012-0053	Apache HTTPD Error Code 400 httpOnly Cookie Handling Information Disclosure (CVE-2012-0053)
High	10 May 2012	10 May 2012	CPAI-2012-181	CVE-2012-0444	Mozilla Multiple Products Ogg Vorbis Decoding Memory Corruption (CVE-2012-0444)
Critical	10 May 2012	10 May 2012	CPAI-2012-220		Novell GroupWise Messenger nmma.exe Login Memory Corruption
High	10 May 2012	10 May 2012	CPAI-2012-174		Novell GroupWise Messenger nmma.exe createsearch Memory Corruption
High	10 May 2012	10 May 2012	CPAI-2012-170	CVE-2011-3179	Novell Groupwise Messenger Server Process Memory Information Disclosure (CVE-2011-3179)
Critical	10 May 2012	10 May 2012	CPAI-2012-231	CVE-2011-4191	Novell Netware XNFS.NLM Caller Name xdrDecodeString Heap Buffer Overflow (CVE-2011-4191)
Critical	10 May 2012	10 May 2012	CPAI-2012-185		Citrix Provisioning Services streamprocess.exe Integer Underflow
High	10 May 2012	10 May 2012	CPAI-2012-172	CVE-2011-3205	Squid Proxy Gopher Response Processing Denial of Service (CVE-2011-3205)
High	10 May 2012	10 May 2012	CPAI-2012-171	CVE-2011-3210	OpenSSL Handshake Sequence Cipher Suite Use-After-Free (CVE-2011-3210)
High	8 May 2012	8 May 2012	CPAI-2012-197	CVE-2012-0184	Microsoft Excel SXLI Record Memory Corruption (MS12-030; CVE-2012-0184)
High	8 May 2012	8 May 2012	CPAI-2012-179	CVE-2012-0142	Microsoft Excel File Format OBJECTLINK Record Memory Corruption (MS12-030; CVE-2012-0142)
Critical	8 May 2012	8 May 2012	CPAI-2012-180	CVE-2012-0165	Microsoft Windows GDI+ Record Type Code Execution (MS12-034; CVE-2012-0165)
Critical	8 May 2012	8 May 2012	CPAI-2012-199	CVE-2012-0176	Microsoft Silverlight Double-Free Remote Code Execution (MS12-034; CVE-2012-0176)
Critical	8 May 2012	8 May 2012	CPAI-2012-215	CVE-2012-1847	Microsoft Excel SERIES Record Parsing Code Execution (MS12-030; CVE-2012-1847)
Critical	8 May 2012	8 May 2012	CPAI-2012-200	CVE-2012-0162	Microsoft .NET Framework XBAP Buffer Allocation Code Execution (MS12-035; CVE-2012-0162)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-140	CVE-2011-1983	Microsoft Office Word Hidden Border Use-After-Free (MS11-089; CVE-2011-1983)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-146	CVE-2005-0402	Mozilla Firefox Sidebar Panel Code Execution (CVE-2005-0402)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-158	CVE-2012-0500	Oracle Java Web Start Command Argument Injection Remote Code Execution (CVE-2012-0500)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-145	CVE-2005-2920	ClamAV AntiVirus UPX Compressed PE Executable Files Buffer Overflow (CVE-2005-2920)
High	23 Apr 2012	23 Apr 2012	CPAI-2012-156	CVE-2012-0775	Adobe Acrobat and Reader JavaScript Memory Corruption (APSB12-08; CVE-2012-0775)