Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	12 Jun 2012	12 Jun 2012	CPAI-2012-249	CVE-2012-1873	Internet Explorer Process Memory Information Disclosure (MS12-037; CVE-2012-1873)
Critical	12 Jun 2012	12 Jun 2012	CPAI-2012-258	CVE-2012-1879	Internet Explorer insertAdjacentText Remote Code Execution (MS12-037; CVE-2012-1879)
High	12 Jun 2012	12 Jun 2012	CPAI-2012-260	CVE-2012-1857	Microsoft Dynamic AX Enterprise Portal Cross-site Scripting (MS12-040; CVE-2012-1857)
High	12 Jun 2012	12 Jun 2012	CPAI-2012-252	CVE-2012-1881	Internet Explorer OnRowsInserted Event Remote Code Execution (MS12-037; CVE-2012-1881)
High	12 Jun 2012	12 Jun 2012	CPAI-2012-261	CVE-2012-0018	Microsoft Visio Viewer VSD File Attributes Validation Error (MS12-031; CVE-2012-0018)
High	14 Feb 2012	4 Jun 2012	CPAI-2012-047	CVE-2012-0017	Microsoft SharePoint inplview.aspx Cross-Site Scripting (MS12-011; CVE-2012-0017)
Critical	28 May 2012	28 May 2012	CPAI-2012-241	CVE-2012-0161	Microsoft .NET Framework Serialization Code Execution (MS12-035; CVE-2012-0161)
Critical	28 May 2012	28 May 2012	CPAI-2012-242	CVE-2012-0160	Microsoft .NET Framework Serialization Data Validation Error (MS12-035; CVE-2012-0160)
Critical	28 May 2012	28 May 2012	CPAI-2012-223		CA Total Defense Suite UNCWS exportReport SQL Injection
Critical	14 May 2012	14 May 2012	CPAI-2012-217	CVE-2011-3923	Apache Struts 2 ParametersInterceptor OGNL Command Execution (CVE-2011-3923)
High	14 May 2012	14 May 2012	CPAI-2012-232	CVE-2012-0499	Oracle Java Runtime TTF Heap Buffer Overflow (CVE-2012-0499)
Critical	14 May 2012	14 May 2012	CPAI-2012-235	CVE-2012-0779	Adobe Flash Player Object Confusion Code Execution (APSB12-09; CVE-2012-0779)
High	10 Jan 2012	10 May 2012	CPAI-2012-017	CVE-2012-0007	Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007; CVE-2012-0007)
High	14 Feb 2012	10 May 2012	CPAI-2012-057	CVE-2012-0136	Microsoft Visio Viewer File Format Code Execution (MS12-015 - CVE-2012-0136)
High	14 Feb 2012	10 May 2012	CPAI-2012-052	CVE-2012-0020	Microsoft Visio Viewer File Format Code Execution (MS12-015 - CVE-2012-0020)
High	14 Feb 2012	10 May 2012	CPAI-2012-055	CVE-2012-0019	Microsoft Visio Viewer VSD File Format Memory Corruption (MS12-015; CVE-2012-0019)
High	10 May 2012	10 May 2012	CPAI-2012-212	CVE-2009-2621	Squid Proxy Invalid HTTP Request Denial of Service (CVE-2009-2621)
High	10 May 2012	10 May 2012	CPAI-2012-213	CVE-2010-3269	Cisco WebEx Player Malformed .WRF File Code Execution (CVE-2010-3269)
Critical	10 May 2012	10 May 2012	CPAI-2012-205	CVE-2012-0870	Samba smbd Packets Infinite Loop Code Execution (CVE-2012-0870)
Critical	10 May 2012	10 May 2012	CPAI-2012-210	CVE-2012-0110	Oracle Outside In Lotus 1-2-3 Heap Buffer Overflow (CVE-2012-0110)
High	10 May 2012	10 May 2012	CPAI-2012-168	CVE-2011-3250	Apple QuickTime JPEG 2000 COD Length Integer Underflow (CVE-2011-3250)
Critical	10 May 2012	10 May 2012	CPAI-2012-177	CVE-2011-4862	Multiple Vendors BSD telnetd Encryption Key Buffer Overflow (CVE-2011-4862)
Critical	10 May 2012	10 May 2012	CPAI-2012-183		Oracle Outside In OOXML Relationship Tag Parsing Stack Buffer Overflow
High	10 May 2012	10 May 2012	CPAI-2012-175	CVE-2012-0053	Apache HTTPD Error Code 400 httpOnly Cookie Handling Information Disclosure (CVE-2012-0053)
High	10 May 2012	10 May 2012	CPAI-2012-181	CVE-2012-0444	Mozilla Multiple Products Ogg Vorbis Decoding Memory Corruption (CVE-2012-0444)
Critical	10 May 2012	10 May 2012	CPAI-2012-220		Novell GroupWise Messenger nmma.exe Login Memory Corruption
High	10 May 2012	10 May 2012	CPAI-2012-174		Novell GroupWise Messenger nmma.exe createsearch Memory Corruption
High	10 May 2012	10 May 2012	CPAI-2012-170	CVE-2011-3179	Novell Groupwise Messenger Server Process Memory Information Disclosure (CVE-2011-3179)
Critical	10 May 2012	10 May 2012	CPAI-2012-231	CVE-2011-4191	Novell Netware XNFS.NLM Caller Name xdrDecodeString Heap Buffer Overflow (CVE-2011-4191)
Critical	10 May 2012	10 May 2012	CPAI-2012-185		Citrix Provisioning Services streamprocess.exe Integer Underflow
High	10 May 2012	10 May 2012	CPAI-2012-172	CVE-2011-3205	Squid Proxy Gopher Response Processing Denial of Service (CVE-2011-3205)
High	10 May 2012	10 May 2012	CPAI-2012-171	CVE-2011-3210	OpenSSL Handshake Sequence Cipher Suite Use-After-Free (CVE-2011-3210)
High	8 May 2012	8 May 2012	CPAI-2012-197	CVE-2012-0184	Microsoft Excel SXLI Record Memory Corruption (MS12-030; CVE-2012-0184)
High	8 May 2012	8 May 2012	CPAI-2012-179	CVE-2012-0142	Microsoft Excel File Format OBJECTLINK Record Memory Corruption (MS12-030; CVE-2012-0142)
Critical	8 May 2012	8 May 2012	CPAI-2012-180	CVE-2012-0165	Microsoft Windows GDI+ Record Type Code Execution (MS12-034; CVE-2012-0165)
Critical	8 May 2012	8 May 2012	CPAI-2012-199	CVE-2012-0176	Microsoft Silverlight Double-Free Remote Code Execution (MS12-034; CVE-2012-0176)
Critical	8 May 2012	8 May 2012	CPAI-2012-215	CVE-2012-1847	Microsoft Excel SERIES Record Parsing Code Execution (MS12-030; CVE-2012-1847)
Critical	8 May 2012	8 May 2012	CPAI-2012-200	CVE-2012-0162	Microsoft .NET Framework XBAP Buffer Allocation Code Execution (MS12-035; CVE-2012-0162)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-140	CVE-2011-1983	Microsoft Office Word Hidden Border Use-After-Free (MS11-089; CVE-2011-1983)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-146	CVE-2005-0402	Mozilla Firefox Sidebar Panel Code Execution (CVE-2005-0402)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-158	CVE-2012-0500	Oracle Java Web Start Command Argument Injection Remote Code Execution (CVE-2012-0500)
High	24 Apr 2012	24 Apr 2012	CPAI-2012-145	CVE-2005-2920	ClamAV AntiVirus UPX Compressed PE Executable Files Buffer Overflow (CVE-2005-2920)
High	23 Apr 2012	23 Apr 2012	CPAI-2012-156	CVE-2012-0775	Adobe Acrobat and Reader JavaScript Memory Corruption (APSB12-08; CVE-2012-0775)
High	16 Apr 2012	16 Apr 2012	CPAI-2012-149	CVE-2012-0505	Oracle Java Runtime Environment Sandbox Breach (CVE-2012-0505)
Medium	16 Apr 2012	16 Apr 2012	CPAI-2012-137	CVE-2011-3834	Nullsoft Winamp AVI Stream Count Integer Overflow (CVE-2011-3834)
High	16 Apr 2012	16 Apr 2012	CPAI-2012-148	CVE-2011-0531	VideoLAN VLC MKV Memory Corruption (CVE-2011-0531)
Critical	16 Apr 2012	16 Apr 2012	CPAI-2012-144	CVE-2010-0268	Microsoft Windows Media Player ActiveX Remote Code Execution (MS10-027; CVE-2010-0268)
Medium	16 Apr 2012	16 Apr 2012	CPAI-2012-134	CVE-2011-4052	InduSoft Web Studio Remote Agent Buffer Overflow (CVE-2011-4052)
High	16 Apr 2012	16 Apr 2012	CPAI-2013-017	CVE-2013-0603	Adobe Reader Crafted JPEG Heap Overflow (APSB13-02; CVE-2013-0603)
High	16 Apr 2012	16 Apr 2012	CPAI-2012-121	CVE-2006-0010	Microsoft Windows Embedded Web Font Handling Buffer Overflow (CVE-2006-0010)