Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Medium	23 Jul 2012	14 Sep 2014	CPAI-2012-313		Cisco WebEx Recording Format Player atdl2006.dll Integer Overflow
High	14 Feb 2012	4 Aug 2014	CPAI-2012-058	CVE-2012-0137	Microsoft Visio Viewer File Format Code Execution (MS12-015 - CVE-2012-0137)
Critical	25 Jun 2012	28 Jul 2014	CPAI-2012-225	CVE-2012-0392	Apache Struts 2 CookieInterceptor OGNL Script Injection (CVE-2012-0392)
High	11 Nov 2012	23 Jul 2014	CPAI-2012-817	CVE-2012-3752	Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)
High	5 Mar 2012	14 Jul 2014	CPAI-2012-077	CVE-2011-3368	Apache HTTPD mod_proxy Security Bypass (CVE-2011-3368)
High	24 Apr 2012	2 Jun 2014	CPAI-2012-152	CVE-2011-0097	Microsoft Excel Substream Parsing Integer Overflow (MS11-021; CVE-2011-0097)
Critical	14 Feb 2012	1 Jun 2014	CPAI-2012-046	CVE-2012-0015	Microsoft .NET Heap Corruption Code Execution (MS12-016; CVE-2012-0015)
Medium	19 Mar 2012	1 Jun 2014	CPAI-2012-072	CVE-2007-0041	Microsoft .NET Framework CLI Loader Memory Corruption (CVE-2007-0041)
Critical	16 Apr 2012	25 May 2014	CPAI-2012-120	CVE-2012-0391	Apache Struts 2 ConversionErrorInterceptor OGNL Script Injection (CVE-2012-0391)
High	14 May 2012	25 May 2014	CPAI-2012-196	CVE-2011-2131	Adobe Photoshop CS5 Malformed GIF File Code Execution (APSB11-22; CVE-2011-2131)
High	20 Aug 2012	25 May 2014	CPAI-2012-333	CVE-2012-0659	Apple QuickTime MPEG Stream Padding Buffer Overflow (CVE-2012-0659)
Critical	27 Aug 2012	25 May 2014	CPAI-2012-322	CVE-2012-2612	SAP NetWeaver DiagTraceHex Denial of Service (CVE-2012-2612)
Medium	3 Dec 2012	25 May 2014	CPAI-2012-1132	CVE-2012-4554	Dries Buytaert Drupal Core OpenID Module Information Disclosure (CVE-2012-4554)
High	3 Jan 2012	20 May 2014	CPAI-2012-002	CVE-2009-2994	Adobe Acrobat and Reader U3D CLODMeshDeclaration Memory Corruption (CVE-2009-2994)
Critical	9 Apr 2012	18 May 2014	CPAI-2012-126	CVE-2012-0773	Adobe Flash Player NetStream class Code Execution (APSB12-07; CVE-2012-0773)
High	24 Dec 2012	13 May 2014	CPAI-2012-1299		Aladdin Knowledge System ChooseFilePath Buffer Overflow
Critical	8 May 2012	12 May 2014	CPAI-2012-194	CVE-2012-0141	Microsoft Excel File Format Code Execution (MS12-030; CVE-2012-0141)
Critical	27 Aug 2012	28 Apr 2014	CPAI-2012-389	CVE-2012-2050	Adobe Reader WKT String Buffer Overflow (APSB12-16; CVE-2012-2050)
High	10 Jan 2012	24 Apr 2014	CPAI-2012-016	CVE-2012-0009	Microsoft Windows Object Packager Insecure Executable Launching (MS12-002; CVE-2012-0009)
High	14 Aug 2012	25 Mar 2014	CPAI-2012-339	CVE-2012-1850	Microsoft Remote Administration Protocol Denial of Service (MS12-054; CVE-2012-1850)
N/A	27 Feb 2012	24 Mar 2014	CPAI-2012-074		Non-SSH Traffic Over Port 22
Critical	14 Feb 2012	13 Mar 2014	CPAI-2012-060	CVE-2012-0150	Microsoft Windows Msvcrt.dll Media File Code Execution (MS12-013; CVE-2012-0150)
High	30 Dec 2012	12 Mar 2014	CPAI-2012-1337	CVE-2012-3756	Apple QuickTime rnet Box Parsing Heap Buffer Overflow (CVE-2012-3756)
Critical	2 Feb 2012	11 Mar 2014	CPAI-2012-045		Suspected LOIC Traffic Domains Block List
High	24 Apr 2012	4 Mar 2014	CPAI-2012-162	CVE-2011-1273	Microsoft Office Excel Record Type Confusion (MS11-045; CVE-2011-1273)
Critical	10 May 2012	23 Feb 2014	CPAI-2012-214	CVE-2012-0199	IBM Tivoli Provisioning Manager Express Asset.getMimeType SQL Injection (CVE-2012-0199)
Medium	10 May 2012	17 Feb 2014	CPAI-2012-230	CVE-2011-3319	Cisco WebEx Player ATDL2006.dll Heap Memory Corruption (CVE-2011-3319)
Medium	10 May 2012	16 Jan 2014	CPAI-2012-202	CVE-2011-3000	Mozilla Multiple Products Multiple Location Headers CRLF Injection (CVE-2011-3000)
High	28 Oct 2012	12 Jan 2014	CPAI-2012-636	CVE-2011-3827	Novell GroupWise Internet Agent iCalendar Parsing Denial of Service - Improved Performance (CVE-2011-3827)
Critical	8 May 2012	9 Jan 2014	CPAI-2012-198	CVE-2012-0159	Microsoft Windows Malformed TrueType Font Remote Code Execution (MS12-034; CVE-2012-0159)
Medium	10 May 2012	9 Jan 2014	CPAI-2012-151	CVE-2011-4259	RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption (CVE-2011-4259)
High	12 Jan 2012	8 Jan 2014	CPAI-2012-025	CVE-2011-2813	Apple Safari WebKit Form Elements Denial of Service (CVE-2011-2813)
High	10 Jul 2012	2 Jan 2014	CPAI-2012-310	CVE-2012-1861	Microsoft SharePoint Script in Username Cross-site Scripting (MS12-050; CVE-2012-1861)
High	14 Oct 2012	31 Dec 2013	CPAI-2012-398	CVE-2012-1520	Apple Safari WebKit Button Column Blocks Memory Corruption (CVE-2012-1520)
High	14 Oct 2012	29 Dec 2013	CPAI-2012-370	CVE-2012-0663	Apple QuickTime TeXML Transform Attribute Parsing Buffer Overflow (CVE-2012-0663)
Critical	14 May 2012	25 Dec 2013	CPAI-2012-209	CVE-2012-0830	PHP php_register_variable_ex Function Code Execution (CVE-2012-0830)
Critical	20 Aug 2012	19 Dec 2013	CPAI-2012-320		Flexera FlexNet Publisher License Server Manager lmgrd Stack Buffer Overflow
High	3 Jan 2012	18 Dec 2013	CPAI-2012-006	CVE-2011-0084	Mozilla Multiple Products Malformed SVG Use After Free (CVE-2011-0084)
High	3 Jan 2012	17 Dec 2013	CPAI-2012-004	CVE-2011-0554	Symantec IM Manager Web Interface ProcessAction Code Execution (CVE-2011-0554)
Critical	10 May 2012	3 Dec 2013	CPAI-2012-222	CVE-2012-0395	EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395)
Medium	14 Oct 2012	3 Dec 2013	CPAI-2012-632		HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite
High	2 Jul 2012	2 Dec 2013	CPAI-2012-318	CVE-2012-0245	ABB Multiple Products RobNetScanHost.exe Stack Buffer Overflow (CVE-2012-0245)
Critical	14 Oct 2012	20 Nov 2013	CPAI-2012-317	CVE-2012-1182	Samba DCE RPC IDL Parser Out-of-bounds Array Access (CVE-2012-1182)
High	19 Mar 2012	3 Nov 2013	CPAI-2012-083		Microsoft Excel XLS File Memory Corruption
High	19 Mar 2012	28 Oct 2013	CPAI-2012-095	CVE-2011-3157	HP Data Protector Multiple Products GetPolicies SQL Injection (CVE-2011-3157)
High	19 Mar 2012	28 Oct 2013	CPAI-2012-100	CVE-2011-3162	HP Data Protector Multiple Products FinishedCopy SQL Injection (CVE-2011-3162)
High	14 Oct 2012	20 Oct 2013	CPAI-2012-384	CVE-2012-0671	Apple QuickTime PICT File Processing Memory Corruption (CVE-2012-0671)
High	20 Feb 2012	15 Oct 2013	CPAI-2012-064	CVE-2007-1747	Microsoft Office Drawing Object Code Execution (MS07-025; CVE-2007-1747)
High	16 Apr 2012	10 Oct 2013	CPAI-2012-150	CVE-2009-1671 CVE-2012-0507	Black Hole Toolkit v1.2.3 Java Array Exploits (CVE-2009-1671; CVE-2012-0507)
Critical	20 Aug 2012	14 Aug 2013	CPAI-2012-355	CVE-2012-4151	Adobe Reader PDF File Invalid Value Code Execution (APSB12-16; CVE-2012-4151)