Home / 2012 Advisories Archive

2012 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	14 Oct 2012	25 Apr 2013	CPAI-2012-338	CVE-2012-0549	Oracle AutoVue AutoVueX ActiveX Control SetMarkupMode Stack Buffer Overflow (CVE-2012-0549)
High	14 Feb 2012	23 Apr 2013	CPAI-2012-049	CVE-2012-0145	Microsoft SharePoint wizardlist.aspx Cross-Site Scripting (MS12-011; CVE-2012-0145)
High	20 Dec 2012	23 Apr 2013	CPAI-2012-1315	CVE-2012-0308	Symantec Messaging Gateway Save.do Cross Site Request Forgery (CVE-2012-0308)
Critical	18 Jun 2012	21 Apr 2013	CPAI-2012-275	CVE-2012-2038	Adobe Flash Player Malicious SWF Security Bypass (APSB12-14; CVE-2012-2038)
N/A	28 Oct 2012	18 Apr 2013	CPAI-2012-654	CVE-2012-4167	Multiple Multimedia Formats (CVE-2012-4167)
High	30 Dec 2012	7 Apr 2013	CPAI-2012-1339	CVE-2012-5643	Squid Proxy Cache cachemgr.cgi Resource Exhaustion (CVE-2012-5643)
Medium	2 Jul 2012	3 Apr 2013	CPAI-2012-293	CVE-2012-0296	Symantec Web Gateway timer.php Multiple Reflected Cross-site Scripting (CVE-2012-0296)
High	16 Dec 2012	18 Mar 2013	CPAI-2012-658	CVE-2012-3526	Apache HTTP Server mod_rpaf Denial of Service (CVE-2012-3526)
Critical	20 Aug 2012	13 Mar 2013	CPAI-2012-353	CVE-2012-4147	Adobe Acrobat PDF File Array Type Error Memory Corruption (APSB12-16; CVE-2012-4147)
Critical	30 Dec 2012	4 Mar 2013	CPAI-2012-1301	CVE-2012-5677	Adobe Flash Player PCM File Integer Overflow (APSB12-27; CVE-2012-5677)
High	16 Apr 2012	3 Mar 2013	CPAI-2012-138	CVE-2011-5001	Trend Micro Control Manager CmdProcessor.exe AddTask Stack Buffer Overflow (CVE-2011-5001)
High	14 Oct 2012	24 Feb 2013	CPAI-2012-368	CVE-2012-2695	Ruby on Rails Hash SQL Injection (CVE-2012-2695)
Critical	30 Dec 2012	24 Feb 2013	CPAI-2012-1314	CVE-2012-5267	Adobe Flash Player JPEG Parsing Buffer Overflow (APSB22-12; CVE-2012-5267)
Medium	31 Dec 2012	20 Feb 2013	CPAI-2012-641		Wibu-Systems WibuKey Runtime for Windows ActiveX Control Buffer Overflow
High	16 Dec 2012	19 Feb 2013	CPAI-2013-413	CVE-2012-4347	Symantec Messaging Gateway Directory Traversal (CVE-2012-4347)
Critical	30 Dec 2012	30 Jan 2013	CPAI-2012-1253	CVE-2012-5269	Adobe Flash Player Out of Bounds Memory Corruption (APSB12-22; CVE-2012-5269)
Critical	28 May 2012	27 Jan 2013	CPAI-2012-243	CVE-2011-5007	SCADA Smart Software Solutions CoDeSys ControlService Stack Buffer Overflow (CVE-2011-5007)
High	2 Jan 2012	20 Jan 2013	CPAI-2013-033	CVE-2011-3414	Microsoft ASP.NET and PHP Hash Collision Denial of Service - Specific (CVE-2011-3414)
Critical	2 Jul 2012	20 Jan 2013	CPAI-2012-291	CVE-2012-1569	GnuTLS libtasn1 ASN1 Length DER Decoding Buffer Overflow (CVE-2012-1569)
High	14 Aug 2012	20 Jan 2013	CPAI-2012-341	CVE-2012-2523	Internet Explorer JavaScript Integer Overflow Remote Code Execution (MS12-056; CVE-2012-2523)
High	23 Dec 2012	20 Jan 2013	CPAI-2012-1318		EZHomeTech EzServer Stack Buffer Overflow
High	2 Dec 2012	17 Jan 2013	CPAI-2012-823	CVE-2012-3753	Apple QuickTime Plugin Content-Type Buffer Overflow (CVE-2012-3753)
High	23 Dec 2012	17 Jan 2013	CPAI-2012-1323		Lattice Semiconductor ispVM System XCF File Handling Overflow
Critical	31 Dec 2012	16 Jan 2013	CPAI-2012-1305	CVE-2012-1744	Oracle Outside In FlashPix Image Processing Code Execution (CVE-2012-1744)
Medium	5 Mar 2012	15 Jan 2013	CPAI-2012-078	CVE-2009-0195	CUPS and Xpdf PDF JBIG2 Symbol Dictionary Buffer Overflow (CVE-2009-0195)
Critical	11 Dec 2012	15 Jan 2013	CPAI-2012-1252	CVE-2012-4787	Internet Explorer Improper Ref Counting Use After Free (MS12-077; CVE-2012-4787)
High	9 Oct 2012	14 Jan 2013	CPAI-2012-630	CVE-2012-2550	Microsoft Works RTF Heap Remote Code Execution (MS12-065; CVE-2012-2550)
Critical	30 Dec 2012	6 Jan 2013	CPAI-2012-1135	CVE-2012-5278	Adobe Flash Player and AIR Security Bypass (APSB12-24; CVE-2012-5278)
High	27 Dec 2012	3 Jan 2013	CPAI-2012-1334		Novell Sentinel Log Manager Retention Policy Security Restriction Bypass
Critical	13 Dec 2012	2 Jan 2013	CPAI-2012-1303	CVE-2011-4516	Oracle Outside In JPEG 2000 Parameter Heap Buffer Overflow (CVE-2011-4516)
Critical	24 Jan 2012	31 Dec 2012	CPAI-2012-034	CVE-2007-2446	Samba SRVSVC RPC sec_io_acl Request Handling Heap Buffer Overflow (CVE-2007-2446)
High	31 Dec 2012	31 Dec 2012	CPAI-2012-1304	CVE-2012-0659	Apple QuickTime MPEG Stream Padding Code Execution (CVE-2012-0659)
High	30 Dec 2012	30 Dec 2012	CPAI-2012-1131	CVE-2009-1730	Ipswitch TFTP Server Information disclosure (CVE-2009-1730)
Critical	26 Dec 2012	27 Dec 2012	CPAI-2012-1327		SCADA Schneider Modicon Quantum Password Recovery
Critical	26 Dec 2012	27 Dec 2012	CPAI-2012-1328		SCADA Siemens FactoryLink vrn.exe Opcode 9 Buffer Overflow
Critical	27 Dec 2012	27 Dec 2012	CPAI-2012-1332		Schneider Modicon SCADA Ladder Logic Upload/Download
Critical	26 Dec 2012	26 Dec 2012	CPAI-2012-1329		Sielco Sistemi Winlog SCADA Remote File Access
Critical	4 Dec 2012	25 Dec 2012	CPAI-2012-1288	CVE-2012-5266	Adobe Flash Player and AIR Malformed Tag Buffer Overflow (APSB12-22; CVE-2012-5266)
High	16 Dec 2012	23 Dec 2012	CPAI-2012-826	CVE-2012-5271	Adobe Flash Player OP_inclocal and OP_declocal Memory Corruption (APSB12-22; CVE-2012-5271)
Critical	23 Dec 2012	23 Dec 2012	CPAI-2012-1137	CVE-2010-3332	Microsoft ASP.NET PKCS Padding Information Disclosure (MS10-070; CVE-2010-3332)
Critical	29 Nov 2012	20 Dec 2012	CPAI-2012-1136	CVE-2012-5270	Adobe Flash Player Type Confusion Remote Code Execution (APSB12-22; CVE-2012-5270)
High	16 Dec 2012	16 Dec 2012	CPAI-2012-1287	CVE-2012-5533	lighttpd Connection Header Parsing Denial of Service (CVE-2012-5533)
High	16 Dec 2012	16 Dec 2012	CPAI-2012-1296		General Electric D20 Password Recovery
Critical	4 Dec 2012	13 Dec 2012	CPAI-2012-1280	CVE-2012-5611	MySQL acl_get Buffer Overrun Remote Code Execution (CVE-2012-5611)
Medium	11 Dec 2012	11 Dec 2012	CPAI-2012-1290	CVE-2011-1140	Wireshark CLDAP Dissector Denial of Service (CVE-2011-1140)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1261	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8Address (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1258	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8Client (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1254	CVE-2012-1537	Microsoft DirectPlay CLSID_DP8SP_MODEM (MS12-082; CVE-2012-1537)
Critical	11 Dec 2012	11 Dec 2012	CPAI-2012-1259	CVE-2012-1537	Microsoft DirectPlay CLSID_DirectPlay8LobbyClient (MS12-082; CVE-2012-1537)
High	4 Nov 2012	6 Dec 2012	CPAI-2012-800	CVE-2012-5671	Exim DKIM DNS Decoding Buffer Overflow (CVE-2012-5671)