Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Check Point Reference	Source	Description
Critical	14 Oct 2012	CPAI-2012-403		Oracle Business Transaction Management Arbitrary File Deletion
High	14 Oct 2012	CPAI-2012-398	CVE-2012-1520	Apple Safari WebKit Button Column Blocks Memory Corruption (CVE-2012-1520)
High	14 Oct 2012	CPAI-2012-396	CVE-2012-2574	Symantec Web Gateway blocked.php Blind SQL Injection (CVE-2012-2574)
Medium	14 Oct 2012	CPAI-2012-390	CVE-2012-2175	IBM Lotus iNotes dwa85W.dll ActiveX Control Buffer Overflow (CVE-2012-2175)
High	14 Oct 2012	CPAI-2012-387	CVE-2011-3068	Google Chrome and Apple Safari Runin Handling Use After Free (CVE-2011-3068)
Critical	14 Oct 2012	CPAI-2012-386	CVE-2012-0550	Oracle GlassFish Enterprise Server REST Interface Cross Site Request Forgery (CVE-2012-0550)
Critical	14 Oct 2012	CPAI-2012-385	CVE-2012-2019	HP Operations Agent Opcode 0x34 Stack Buffer Overflow (CVE-2012-2019)
High	14 Oct 2012	CPAI-2012-384	CVE-2012-0671	Apple QuickTime PICT File Processing Memory Corruption (CVE-2012-0671)
High	14 Oct 2012	CPAI-2012-379	CVE-2012-1952	Mozilla Multiple Products Table Frames Memory Corruption (CVE-2012-1952)
Critical	14 Oct 2012	CPAI-2012-378	CVE-2012-0121	HP Data Protector Express Multiple Opcodes Parsing Stack Buffer Overflow (CVE-2012-0121)
Critical	14 Oct 2012	CPAI-2012-374	CVE-2011-4163	HP Database Archiving Software GIOP Opcode Buffer Overflow (CVE-2011-4163)
Critical	14 Oct 2012	CPAI-2012-373	CVE-2012-1769	Oracle Outside In JPEG 2000 QCD Segment Processing Heap Buffer Overflow (CVE-2012-1769)
High	14 Oct 2012	CPAI-2012-372		HP StorageWorks File Migration Agent RsaCIFS.dll Stack Buffer Overflow
High	14 Oct 2012	CPAI-2012-371		HP StorageWorks File Migration Agent RsaFTP.dll Stack Buffer Overflow
High	14 Oct 2012	CPAI-2012-370	CVE-2012-0663	Apple QuickTime TeXML Transform Attribute Parsing Buffer Overflow (CVE-2012-0663)
High	14 Oct 2012	CPAI-2012-369	CVE-2012-2514	SAP NetWeaver DiagiEventSource Denial of Service (CVE-2012-2514)
High	14 Oct 2012	CPAI-2012-368	CVE-2012-2695	Ruby on Rails Hash SQL Injection (CVE-2012-2695)
High	4 Nov 2012	CPAI-2012-785		ROCKWELL Automation ControlLogix EtherNET/IP Firmware Update Initialization
High	4 Nov 2012	CPAI-2012-784		ROCKWELL Automation ControlLogix Crash 1756-ENBT Module (CrashEth)
High	4 Nov 2012	CPAI-2012-783		ROCKWELL Automation ControlLogix EtherNET/IP Reset Command Denial Of Service
High	4 Nov 2012	CPAI-2012-782		ROCKWELL Automation ControlLogix EtherNET/IP Modules Boot Code Dump (Dump)
High	4 Nov 2012	CPAI-2012-781		ROCKWELL Automation ControlLogix Denial of Service (Crash CPU)
High	4 Nov 2012	CPAI-2012-780		ROCKWELL Automation ControlLogix Denial of Service (CPU Stop)
High	4 Nov 2012	CPAI-2012-778		Rockwell RNA Message Negative Body Length
Critical	28 Oct 2012	CPAI-2012-654	CVE-2012-4167	Adobe Flash Player Video File Heap Buffer Overflow (APSB12-19; CVE-2012-4167)
High	28 Oct 2012	CPAI-2012-649	CVE-2012-4171	Adobe Flash Player Multiple Dialog Boxes Denial Of Service (APSB12-19; CVE-2012-4171)
High	21 Oct 2012	CPAI-2012-642	CVE-2012-2551	Microsoft Kerberos NULL Dereference Denial of Service (MS12-069; CVE-2012-2551)
High	21 Oct 2012	CPAI-2012-640	CVE-2012-4165	Adobe Flash Player Malformed Byte Code Remote Code Execution (APSB12-19; CVE-2012-4165)
High	21 Oct 2012	CPAI-2012-639	CVE-2012-4163	Adobe Flash Player Malformed Tag Memory Corruption (CVE-2012-4163; APSB12-19)
High	21 Oct 2012	CPAI-2012-415	CVE-2011-1986	Microsoft Office Excel Record Parsing Use After Free (MS11-072; CVE-2011-1986)
Critical	14 Oct 2012	CPAI-2012-364	CVE-2012-1744	Oracle Outside In FlashPix Image Processing Heap Buffer Overflow (CVE-2012-1744)
High	14 Oct 2012	CPAI-2012-363	CVE-2011-4187	Novell iPrint Client GetDriverSettings Realm Parameter Stack Buffer Overflow (CVE-2011-4187)
Critical	14 Oct 2012	CPAI-2012-317	CVE-2012-1182	Samba DCE RPC IDL Parser Out-of-bounds Array Access (CVE-2012-1182)
Medium	14 Oct 2012	CPAI-2012-300	CVE-2012-2176	IBM Lotus Quickr qp2.cab ActiveX Control Stack Buffer Overflow (CVE-2012-2176)
Critical	13 Nov 2012	CPAI-2012-808	CVE-2012-1527 CVE-2012-1528	Microsoft Windows Briefcase Integer Underflow (MS12-072; CVE-2012-1527; CVE-2012-1528)
Critical	13 Nov 2012	CPAI-2012-795	CVE-2012-2543	Microsoft Excel Modified Data Structure Stack Overflow (MS12-076; CVE-2012-2543)
Critical	13 Nov 2012	CPAI-2012-793	CVE-2012-2519	Microsoft .NET Framework Insecure Library Loading Code Execution (MS12-074; CVE-2012-2519)
High	4 Nov 2012	CPAI-2012-726		Sielco Sistemi WinLog Stack Overflow Attempt
High	4 Nov 2012	CPAI-2012-724		RealWin INFOTAG SET CONTROL Packet Processing Buffer Overflow
High	4 Nov 2012	CPAI-2012-721		RealWin HMI Service Buffer Overflow Attempt 1
High	4 Nov 2012	CPAI-2012-709		RealFlex RealWin SCADA On FC RFUSER FCS LOGIN Buffer Overflow
High	4 Nov 2012	CPAI-2012-695		IGSS SCADA ListAll Function Buffer Overflow
High	4 Nov 2012	CPAI-2012-691		RealFlex RealWin SCADA On FC BINFILE FCS FILE Buffer Overflow 1
High	4 Nov 2012	CPAI-2012-669		IGSS SCADA Write File Function Buffer Overflow
High	18 Nov 2012	CPAI-2012-822		PROMOTIC ActiveX Control Insecure method (AddTrend)
High	18 Nov 2012	CPAI-2012-821		PROMOTIC ActiveX Control Insecure method (SaveCfg)
Critical	18 Nov 2012	CPAI-2012-814		SCADA PcVue Activex Control Insecure Method (GetExtendedColor)
Critical	18 Nov 2012	CPAI-2012-813		SCADA PcVue Activex Control Insecure Method (LoadObject)
Critical	18 Nov 2012	CPAI-2012-812		SCADA PcVue Activex Control Insecure Method (SaveObject)
Critical	18 Nov 2012	CPAI-2012-811		SCADA PcVue Activex Control Insecure Method (DeletePage)