Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Check Point Reference	Source	Description
Critical	5 Dec 2012	CPAI-2012-1284	CVE-2012-2288	EMC NetWorker nsrd Stack Buffer Overflow (CVE-2012-2288)
Critical	11 Dec 2012	CPAI-2012-788	CVE-2012-4774	Microsoft Windows Filename Parsing Remote Code Execution (MS12-081; CVE-2012-4774)
High	11 Dec 2012	CPAI-2012-1295		DNS ANY Request Malformed Payload Denial of Service
Critical	5 Dec 2012	CPAI-2012-1255		Novell NetIQ Privileged User Manager Eval Policy Bypass
Critical	2 Dec 2012	CPAI-2012-833	CVE-2012-5076	Java Applet JAX-WS Remote Code Execution (CVE-2012-5076)
High	2 Dec 2012	CPAI-2012-819	CVE-2012-0235	Sunway ForceControl Activex Control Vulnerability
High	2 Dec 2012	CPAI-2012-798		CYME Multiple Products ChartFX.ClientServer.Core.dll Remote Code Execution
Critical	2 Dec 2012	CPAI-2012-786	CVE-2012-4933	Novell ZENworks Asset Management Web Console Information Disclosure (CVE-2012-4933)
High	2 Dec 2012	CPAI-2012-653	CVE-2012-2953	Symantec Web Gateway pbcontrol.php Command Injection (CVE-2012-2953)
Medium	2 Dec 2012	CPAI-2012-394	CVE-2011-2592	Citrix Access Gateway nsepacom ActiveX Control Buffer Overflow (CVE-2011-2592)
High	25 Nov 2012	CPAI-2012-824		Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload (CVE-2012-0299)
High	25 Nov 2012	CPAI-2012-823	CVE-2012-3753	Apple QuickTime Plugin Content-Type Buffer Overflow (CVE-2012-3753)
High	25 Nov 2012	CPAI-2012-383	CVE-2011-0517	Sielco Sistemi Winlog Server Buffer Overflow (CVE-2011-0517)
Medium	25 Nov 2012	CPAI-2012-375		Sysax Multi Server SSH Username Buffer Overflow
Critical	18 Nov 2012	CPAI-2012-641	CVE-2012-0271	Novell GroupWise Internet Agent Content-length Integer Overflow (CVE-2012-0271)
Critical	18 Nov 2012	CPAI-2012-638		HP SiteScope Multiple Directory Traversal Vulnerabilities
High	18 Nov 2012	CPAI-2012-636	CVE-2011-3827	Novell GroupWise Internet Agent iCalendar Parsing Denial of Service (CVE-2011-3827)
Critical	13 Dec 2012	CPAI-2012-1305	CVE-2012-1744	Oracle Outside In FlashPix Image Processing Code Execution (CVE-2012-1744)
Critical	13 Dec 2012	CPAI-2012-1303	CVE-2011-4516	Oracle Outside In JPEG 2000 Parameter Heap Buffer Overflow (CVE-2011-4516)
High	16 Dec 2012	CPAI-2012-828	CVE-2012-4170	Adobe Photoshop PNG Image Processing Buffer Overflow (APSB12-20; CVE-2012-4170)
High	16 Dec 2012	CPAI-2012-827		Adobe Flash Player copyRawDataTo Out of Bounds Array Indexing (APSB12-19)
High	16 Dec 2012	CPAI-2012-826	CVE-2012-5271	Adobe Flash Player OP_inclocal and OP_declocal Memory Corruption (APSB12-22; CVE-2012-5271)
High	16 Dec 2012	CPAI-2012-825	CVE-2012-2972	CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972)
High	16 Dec 2012	CPAI-2012-817	CVE-2012-3752	Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)
High	16 Dec 2012	CPAI-2012-800	CVE-2012-5671	Exim DKIM DNS Decoding Buffer Overflow (CVE-2012-5671)
Medium	16 Dec 2012	CPAI-2012-799		SafeNet HASP SL ActiveX Control ChooseFilePath Buffer Overflow
Critical	11 Dec 2012	CPAI-2012-1291	CVE-2012-4786	Microsoft Windows TrueType Font Parsing Remote Code Execution (MS12-078; CVE-2012-4786)
Critical	11 Dec 2012	CPAI-2012-1261	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8Address (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	CPAI-2012-1260	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8LobbiedApplication (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	CPAI-2012-1259	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8LobbyClient (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	CPAI-2012-1258	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8Client (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	CPAI-2012-1257	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8Peer (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	CPAI-2012-1256	CVE-2012-1537	Microsoft DirectPlay CLSID_DP8SP_SERIAL (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	CPAI-2012-1254	CVE-2012-1537	Microsoft DirectPlay CLSID_DP8SP_MODEM (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	CPAI-2012-1252	CVE-2012-4787	Internet Explorer Improper Ref Counting Use After Free (MS12-077; CVE-2012-4787)
Critical	18 Dec 2012	CPAI-2012-1293	CVE-2012-3811	Avaya IP Office CCR ImageUpload.ashx Unrestricted File Upload (CVE-2012-3811)
High	23 Dec 2012	CPAI-2012-842		Horde FTP Server Backdoor Arbitrary PHP Code Execution (CVE-2012-0209)
High	23 Dec 2012	CPAI-2012-835	CVE-2011-4050	7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050)
High	23 Dec 2012	CPAI-2012-602		Flexera Multiple Products ISGrid.dll ActiveX Control Code Execution
Medium	23 Dec 2012	CPAI-2012-289	CVE-2012-1923	RealNetworks Helix Server SNMP Master Agent TCP Connection Denial of Service (CVE-2012-1923)
High	20 Dec 2012	CPAI-2012-1311	CVE-2012-5612	Oracle MySQL DELETE Heap Buffer Overflow (CVE-2012-5612)
High	18 Dec 2012	CPAI-2012-1294	CVE-2012-5611	Oracle MySQL GRANT Command Stack Buffer Overflow (CVE-2012-5611)
High	16 Dec 2012	CPAI-2012-787	CVE-2012-2995	Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)
High	16 Dec 2012	CPAI-2012-658	CVE-2012-3526	Apache HTTP Server mod_rpaf Denial of Service (CVE-2012-3526)
High	16 Dec 2012	CPAI-2012-655		Novell File Reporter VOL Tag Stack Buffer Overflow
Medium	16 Dec 2012	CPAI-2012-637	CVE-2012-2494	Cisco AnyConnect VPN Client Software Downgrade Code Execution (CVE-2012-2494)
Critical	16 Dec 2012	CPAI-2012-422		Oracle Fusion Middleware Outside In Excel File Parsing Integer Overflow
High	16 Dec 2012	CPAI-2012-1287	CVE-2012-5533	lighttpd Connection Header Parsing Denial of Service (CVE-2012-5533)
Critical	16 Dec 2012	CPAI-2012-1133		D-Link Wireless Router CAPTCHA Data Processing Buffer Overflow
Critical	30 Dec 2012	CPAI-2012-816	CVE-2012-2971	CA ARCserve Backup Authentication Service Invalid Call Remote Code Execution (CVE-2012-2971)