Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	20 Oct 2013	19 Jan 2015	CPAI-2013-3492		CVE-2013-5641	Digium Asterisk SIP Terminated Channel ACK with SDP denial of service - ver 2 (CVE-2013-5641)
High	10 Sep 2013	18 Jan 2015	CPAI-2013-2910		CVE-2013-0081	Microsoft SharePoint W3WP Denial of Service (MS13-067; CVE-2013-0081)
High	2 Jun 2013	31 Dec 2014	CPAI-2013-1849		CVE-2013-1491	Oracle Java Font Processing Memory Corruption (CVE-2013-1491)
High	9 Sep 2013	30 Dec 2014	CPAI-2013-2922		CVE-2013-1862	Apache HTTP Server mod_rewrite RewriteLog Command Execution (CVE-2013-1862)
Critical	27 Oct 2013	25 Dec 2014	CPAI-2014-1759		CVE-2010-5107	OpenSSH maxstartup Threshold Connection Exhaustion Denial of Service - ver 2 (CVE-2010-5107)
Critical	17 Feb 2013	21 Dec 2014	CPAI-2013-1297		CVE-2013-0640 CVE-2013-0641	Adobe Reader PDF File DLL Injection Remote Code Execution (APSA13-02; CVE-2013-0640; CVE-2013-0641)
High	14 Jul 2013	21 Dec 2014	CPAI-2013-2477		CVE-2013-2470	Oracle Java sun.awt.image.ImagingLib.lookupByteBI Memory Corruption (CVE-2013-2470)
High	24 Oct 2013	15 Dec 2014	CPAI-2013-3508		CVE-2012-6077	W3-Total-Cache Wordpress-plugin Username and Hash Extract (CVE-2012-6077)
Medium	13 Jan 2013	7 Dec 2014	CPAI-2012-841			Foxit Reader Insecure Library Loading
High	4 Feb 2013	3 Dec 2014	CPAI-2013-086		CVE-2013-0393	Oracle Outside In Paradox Database Stream Filter Denial of Service (CVE-2013-0393)
Critical	5 May 2013	3 Dec 2014	CPAI-2013-1703		CVE-2013-1080	Novell ZENworks Configuration Management File Upload (CVE-2013-1080)
High	14 Nov 2013	3 Dec 2014	CPAI-2013-3556	GNOME	CVE-2013-5745	GNOME Vino VNC Server Denial of Service (CVE-2013-5745)
High	9 Apr 2013	1 Dec 2014	CPAI-2013-1315		CVE-2012-4823	IBM Java java.lang.ClassLoader.defineClass Sandbox Breach (CVE-2012-4823)
High	24 Mar 2013	26 Nov 2014	CPAI-2013-1871		CVE-2013-0726	Intergraph ERDAS ER Viewer Buffer Overflow (CVE-2013-0726)
High	14 Jan 2013	25 Nov 2014	CPAI-2013-012		CVE-2012-5691	RealNetworks RealPlayer URL Parsing Stack Buffer Overflow (CVE-2012-5691)
High	3 Nov 2013	25 Nov 2014	CPAI-2013-3529		CVE-2013-4660	Nodejs js-yaml load() Code Execution (CVE-2013-4660)
Medium	16 May 2013	23 Nov 2014	CPAI-2013-1826		CVE-2011-4051	InduSoft Web Studio Unauthenticated Insecure Remote Operations - High Confidence (CVE-2011-4051)
High	23 May 2013	18 Nov 2014	CPAI-2013-1837			DataLife Engine preview.php PHP Code Injection
High	1 Jul 2013	17 Nov 2014	CPAI-2013-1668		CVE-2013-1015	Apple QuickTime TeXML textBox Element Memory Corruption (CVE-2013-1015)
High	8 Apr 2013	9 Nov 2014	CPAI-2013-1655		CVE-2012-4170	Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)
Critical	11 Aug 2013	9 Nov 2014	CPAI-2013-2539		CVE-2013-1559	Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Code Execution (CVE-2013-1559)
High	15 Oct 2013	6 Nov 2014	CPAI-2013-3477		CVE-2013-4983	Sophos Web Protection Appliance sblistpack Arbitrary Command Execution (CVE-2013-4983)
High	3 Apr 2013	3 Nov 2014	CPAI-2013-1648		CVE-2013-1289	Microsoft HTML Sanitization Cross Site Scripting (MS13-035; CVE-2013-1289)
High	23 May 2013	29 Oct 2014	CPAI-2013-1839		CVE-2012-5206 CVE-2014-2619	HP Intelligent Management Center SyslogDownloadServlet Information Disclosure (CVE-2012-5206; CVE-2014-2619)
Medium	27 Oct 2013	20 Oct 2014	CPAI-2013-3484		CVE-2013-0733	Corel PaintShop Pro Insecure Library Loading (CVE-2013-0733)
High	22 Dec 2013	14 Oct 2014	CPAI-2013-3751		CVE-2013-3934	Kingsoft Writer Font Names Buffer Overflow (CVE-2013-3934)
High	22 Dec 2013	14 Oct 2014	CPAI-2013-3751		CVE-2013-3934	Kingsoft Writer Font Names Buffer Overflow (CVE-2013-3934)
N/A	25 Aug 2013	2 Oct 2014	CPAI-2013-2755			Java User Agent Executable Download
High	2 May 2013	23 Sep 2014	CPAI-2013-1701		CVE-2012-5204 CVE-2014-2621	HP Intelligent Management Center IctDownloadServlet Information Disclosure (CVE-2012-5204; CVE-2014-2621)
High	5 May 2013	23 Sep 2014	CPAI-2013-1707		CVE-2012-5202 CVE-2014-2620	HP Intelligent Management Center FaultDownloadServlet Information Disclosure (CVE-2012-5202; CVE-2014-2620)
High	2 Jun 2013	22 Sep 2014	CPAI-2013-1844			Wordpress W3 Total Cache PHP Code Execution
Critical	11 Jul 2013	18 Sep 2014	CPAI-2013-2471		CVE-2008-4250	Microsoft RPC Services Path Canonicalization Remote Code Execution (CVE-2008-4250)
High	3 Apr 2013	14 Aug 2014	CPAI-2013-008			VideoLAN VLC Media Player SWF Code Execution
Critical	12 Nov 2013	12 Aug 2014	CPAI-2013-3535		CVE-2013-5763 CVE-2013-5879	Oracle Outside In OS 2 Metafile Parser stack buffer overflow (CVE-2013-5763; CVE-2013-5879)
Critical	30 Apr 2013	29 Jul 2014	CPAI-2013-1688		CVE-2004-0790	Multiple Vendor ICMP Connection Reset Denial of Service - High Confidence (CVE-2004-0790)
High	10 Dec 2013	30 Jun 2014	CPAI-2014-0371		CVE-2013-2551	Suspicious Javascript Variable Names (CVE-2013-2551)
Critical	22 Apr 2013	16 Jun 2014	CPAI-2013-1678		CVE-2010-2221	iSCSI target Multiple Implementations iSNS Stack Buffer Overflow - High Confidence (CVE-2010-2221)
High	29 Sep 2013	16 Jun 2014	CPAI-2014-1636		CVE-2013-3617 CVE-2013-4152 CVE-2013-6429 CVE-2014-0002 CVE-2014-0423	Multiple Products XML Public External Entity Information Disclosure (CVE-2013-3617; CVE-2013-4152; CVE-2013-6429; CVE-2014-0002; CVE-2014-0423)
Medium	24 Mar 2013	15 May 2014	CPAI-2013-1637		CVE-2012-4914	CoolPDF Reader Image Stream Processing Buffer Overflow (CVE-2012-4914)
High	3 Apr 2013	15 May 2014	CPAI-2013-1647		CVE-2012-3282	HP LeftHand Virtual SAN Appliance hydra Credential Information Disclosure (CVE-2012-3282)
Critical	26 Dec 2013	15 May 2014	CPAI-2013-3759		CVE-2013-6420	PHP OpenSSL Extension X.509 Certificate Memory Corruption (CVE-2013-6420)
High	3 Mar 2013	12 May 2014	CPAI-2013-1314		CVE-2012-0677	Apple iTunes m3u Playlist Multiple Buffer Overflows - High Confidence (CVE-2012-0677)
Critical	27 Jun 2013	7 May 2014	CPAI-2006-302		CVE-2013-0757 CVE-2013-0758	Mozilla Firefox Flash Privileged Code Injection (CVE-2013-0757; CVE-2013-0758)
Critical	27 Oct 2013	30 Apr 2014	CPAI-2013-3512		CVE-2010-5107	OpenSSH maxstartup Threshold Connection Exhaustion denial of service (CVE-2010-5107)
Critical	5 Feb 2013	27 Apr 2014	CPAI-2013-087		CVE-2013-0928	EMC AlphaStor Device Manager Command Injection - Improved performance (CVE-2013-0928)
High	12 Mar 2013	27 Apr 2014	CPAI-2013-1339		CVE-2013-0080	Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)
Critical	26 Nov 2013	17 Apr 2014	CPAI-2013-3610		CVE-2013-4835	HP SiteScope issueSiebelCmd SOAP Request Code Execution (CVE-2013-4835)
Medium	22 May 2013	13 Apr 2014	CPAI-2013-1835		CVE-2013-3238	PhpMyAdmin preg_replace Function Code Injection (CVE-2013-3238)
Medium	12 Aug 2013	1 Apr 2014	CPAI-2013-2748		CVE-2013-3663	Trimble Navigation SketchUp BMP File Code Execution (CVE-2013-3663)
Critical	29 Dec 2013	27 Mar 2014	CPAI-2013-3763		CVE-2013-5791	Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)