Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	2 Apr 2012	2 Apr 2012	CPAI-2012-122		CVE-2012-0772	Adobe Flash Player URL Security Domain Checking Code Execution (APSB12-07; CVE-2012-0772)
N/A	2 Apr 2012	2 Apr 2012	CPAI-2012-119			WebSocket Traffic Over HTTP port
High	26 Mar 2012	26 Mar 2012	CPAI-2012-111		CVE-2011-2397	Autonomy Connected Backup Type 13 Command Injection (CVE-2011-2397)
Critical	26 Mar 2012	26 Mar 2012	CPAI-2012-110			Smart Software Solutions CoDeSys Gateway Server Integer Overflow
High	26 Mar 2012	26 Mar 2012	CPAI-2012-116		CVE-2011-3158	HP Data Protector Multiple Products RequestCopy SQL Injection (CVE-2011-3158)
High	26 Mar 2012	26 Mar 2012	CPAI-2012-113		CVE-2007-0221	Microsoft Exchange Server IMAP Literal Processing Denial of Service (MS07-026; CVE-2007-0221)
High	26 Mar 2012	26 Mar 2012	CPAI-2012-109			Microsoft Office VBA Module Stream Use after Free
Critical	26 Mar 2012	26 Mar 2012	CPAI-2012-108		CVE-2011-4191	Novell Netware XNFS.NLM Heap Buffer Overflow (CVE-2011-4191)
High	19 Mar 2012	19 Mar 2012	CPAI-2012-106		CVE-2011-3545	Oracle Java Array Index Out-of-Bounds Code Execution (CVE-2011-3545)
Critical	19 Mar 2012	19 Mar 2012	CPAI-2012-105		CVE-2011-3490	Measuresoft ScadaPro xf Command Execution (CVE-2011-3490)
Critical	19 Mar 2012	19 Mar 2012	CPAI-2012-090		CVE-2011-2003	Microsoft Windows Font Library File Buffer Overflow (CVE-2011-2003)
Critical	12 Mar 2012	12 Mar 2012	CPAI-2012-088		CVE-2012-0769	Adobe Flash Player ActionScript3 Out Of Bounds Integer Overflow (APSB12-05; CVE-2012-0769)
High	12 Mar 2012	12 Mar 2012	CPAI-2012-089		CVE-2012-0768	Adobe Flash Player Stage3D NULL Pointer Dereference (APSB12-05; CVE-2012-0768)
Critical	5 Mar 2012	5 Mar 2012	CPAI-2012-081		CVE-2010-0270	Microsoft SMB Client Response Parsing Code Execution (MS10-020; CVE-2010-0270)
High	5 Mar 2012	5 Mar 2012	CPAI-2012-070		CVE-2012-0752	Adobe Flash Player AVM2 Null Dereference Memory Corruption (APSB12-03; CVE-2012-0752)
High	5 Mar 2012	5 Mar 2012	CPAI-2012-071		CVE-2012-0753	Adobe Flash Player Malformed MP4 Code Execution (APSB12-03; CVE-2012-0753)
Critical	27 Feb 2012	27 Feb 2012	CPAI-2012-067		CVE-2012-0756	Adobe Flash Player Insecure Library Loading (APSB12-03; CVE-2012-0756)
High	27 Feb 2012	27 Feb 2012	CPAI-2012-068		CVE-2012-0767	Adobe Flash Player ActiveX Control Cross-Site Scripting (APSB12-03; CVE-2012-0767)
Critical	4 Jan 2012	14 Feb 2012	CPAI-2012-013		CVE-2011-5046	Microsoft Windows Win32k.sys Malformed IFrame Memory Corruption (MS12-008; CVE-2011-5046)
Medium	14 Feb 2012	14 Feb 2012	CPAI-2012-043		CVE-2010-1883	Microsoft Embedded OpenType EOT Font Integer Overflow (MS10-076; CVE-2010-1883)
High	14 Feb 2012	14 Feb 2012	CPAI-2012-048		CVE-2012-0144	Microsoft SharePoint themeweb.aspx Cross-Site Scripting (MS12-011; CVE-2012-0144)
Critical	14 Feb 2012	14 Feb 2012	CPAI-2012-056		CVE-2012-0014	Microsoft.NET and Silevrlight Unmanaged Objects Code Execution (MS12-016; CVE-2012-0014)
High	14 Feb 2012	14 Feb 2012	CPAI-2012-059		CVE-2012-0138	Microsoft Visio Viewer File Format Code Execution (MS12-015 - CVE-2012-0138)
High	31 Jan 2012	31 Jan 2012	CPAI-2012-039			Oracle AutoVue AutoVueX ActiveX Control ExportEdaBom Remote File Creation
High	31 Jan 2012	31 Jan 2012	CPAI-2012-040			Oracle AutoVue AutoVueX ActiveX Control Export3DBom Remote File Creation
Critical	17 Jan 2012	17 Jan 2012	CPAI-2012-030		CVE-2012-4373	Adobe Reader and Acrobat Embedded BMP Memory Corruption (APSB12-01; CVE-2012-4373)
Critical	17 Jan 2012	17 Jan 2012	CPAI-2012-028		CVE-2011-4370	Adobe Acrobat and Reader JPEG DCT Dequantizer Memory Corruption (APSB12-01; CVE-2011-4370)
Medium	12 Jan 2012	12 Jan 2012	CPAI-2012-023			Oracle Hyperion Strategic Finance Client ActiveX Control Code Execution
High	12 Jan 2012	12 Jan 2012	CPAI-2012-022			Embarcadero InterBase Connect Request Multiple Stack Buffer Overflows
Critical	10 Jan 2012	10 Jan 2012	CPAI-2012-019		CVE-2012-0004	Microsoft Windows DirectShow Filters Remote Code Execution (MS12-004; CVE-2012-0004)
High	3 Jan 2012	3 Jan 2012	CPAI-2012-003			Oracle AutoVue ActiveX Control File Overwrite
Critical	3 Jan 2012	3 Jan 2012	CPAI-2012-007		CVE-2007-1398	Sourcefire Snort Packet Fragmentation Reassembly Denial of Service (CVE-2007-1398)
Critical	13 Mar 2012	1 Jan 2012	CPAI-2012-099	CVE-2012-0152		Preemptive Protection against Microsoft Terminal Server Denial of Service (MS12-020; CVE-2012-0152)
High	10 Jan 2012	1 Jan 2012	CPAI-2012-020	CVE-2011-3389		Preemptive Protection against SSL and TLS Protocols Information Disclosure (MS12-006; CVE-2011-3389)
High	1 Oct 2012	1 Jan 2012	CPAI-2012-622	CVE-2012-4681		Preemptive Protection against Oracle JRE Restrictions Bypass Remote Code Execution (CVE-2012-4681)
Critical	10 Jul 2012	1 Jan 2012	CPAI-2012-308	CVE-2012-1889		Preemptive Protection against Microsoft XML Uninitialized Memory Corruption (MS12-043; CVE-2012-1889)
High	27 Aug 2012	1 Jan 2012	CPAI-2012-397	CVE-2010-3945		Preemptive protection against Microsoft CGM File Format Memory Corruption (MS12-057; CVE-2012-2524)
High	10 Jul 2012	1 Jan 2012	CPAI-2012-309	CVE-2012-1858		Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858)
Critical	9 Oct 2012	1 Jan 2012	CPAI-2012-423	CVE-2012-4159		Adobe Acrobat and Reader PDF Malicious Stream Code Execution (APSB12-16; CVE-2012-4159)
Critical	17 Jan 2012	1 Jan 2012	CPAI-2012-031	CVE-2011-4372 CVE-2011-2438		Preemptive Protection against Adobe Reader and Acrobat Embedded BMP Malicious JavaScript Memory Corruption (APSB12-01; CVE-2011-4372)
Critical	13 Feb 2012	1 Jan 2012	CPAI-2012-063	CVE-2011-1865		HP OpenView Storage Data Protector Opcode 27 Stack Buffer Overflow
High	12 Mar 2012	1 Jan 2012	CPAI-2012-087	CVE-2012-0006		Microsoft DNS Server Denial of Service (MS12-017; CVE-2012-0006)
Critical	5 Jan 2012	1 Jan 2011	CPAI-2011-126			Novell ZENworks Handheld Management Upload Directory Traversal
Critical	5 Jan 2012	1 Jan 2011	CPAI-2011-127			Trend Micro Control Manager CSRF
High	5 Jan 2012	1 Jan 2011	CPAI-2011-128			Preemptive Protection against Freefloat FTP Server Invalid Command Buffer Overflow
High	10 Jan 2012		CPAI-2012-020	CVE-2011-3389		Preemptive Protection against SSL and TLS Protocols Information Disclosure (MS12-006; CVE-2011-3389)
High	10 Jan 2012		CPAI-2012-019	CVE-2012-0004		Microsoft Windows DirectShow Filters Remote Code Execution (MS12-004; CVE-2012-0004)
High	10 Jan 2012		CPAI-2012-018	CVE-2012-0013		Microsoft Windows Assembly Execution Vulnerability (MS12-005; CVE-2012-0013)
High	10 Jan 2012		CPAI-2012-017	CVE-2012-0007		Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007; CVE-2012-0007)
High	10 Jan 2012		CPAI-2012-016	CVE-2012-0009		Microsoft Windows Object Packager Insecure Executable Launching (MS12-002; CVE-2012-0009)