Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	14 Jan 2013	25 Nov 2014	CPAI-2013-012	CVE-2012-5691	RealNetworks RealPlayer URL Parsing Stack Buffer Overflow (CVE-2012-5691)
High	3 Nov 2013	25 Nov 2014	CPAI-2013-3529	CVE-2013-4660	Nodejs js-yaml load() Code Execution (CVE-2013-4660)
Medium	16 May 2013	23 Nov 2014	CPAI-2013-1826	CVE-2011-4051	InduSoft Web Studio Unauthenticated Insecure Remote Operations - High Confidence (CVE-2011-4051)
High	23 May 2013	18 Nov 2014	CPAI-2013-1837		DataLife Engine preview.php PHP Code Injection
High	1 Jul 2013	17 Nov 2014	CPAI-2013-1668	CVE-2013-1015	Apple QuickTime TeXML textBox Element Memory Corruption (CVE-2013-1015)
High	8 Apr 2013	9 Nov 2014	CPAI-2013-1655	CVE-2012-4170	Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)
Critical	11 Aug 2013	9 Nov 2014	CPAI-2013-2539	CVE-2013-1559	Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Code Execution (CVE-2013-1559)
High	15 Oct 2013	6 Nov 2014	CPAI-2013-3477	CVE-2013-4983	Sophos Web Protection Appliance sblistpack Arbitrary Command Execution (CVE-2013-4983)
High	3 Apr 2013	3 Nov 2014	CPAI-2013-1648	CVE-2013-1289	Microsoft HTML Sanitization Cross Site Scripting (MS13-035; CVE-2013-1289)
High	23 May 2013	29 Oct 2014	CPAI-2013-1839	CVE-2012-5206 CVE-2014-2619	HP Intelligent Management Center SyslogDownloadServlet Information Disclosure (CVE-2012-5206; CVE-2014-2619)
Medium	27 Oct 2013	20 Oct 2014	CPAI-2013-3484	CVE-2013-0733	Corel PaintShop Pro Insecure Library Loading (CVE-2013-0733)
High	22 Dec 2013	14 Oct 2014	CPAI-2013-3751	CVE-2013-3934	Kingsoft Writer Font Names Buffer Overflow (CVE-2013-3934)
High	22 Dec 2013	14 Oct 2014	CPAI-2013-3751	CVE-2013-3934	Kingsoft Writer Font Names Buffer Overflow (CVE-2013-3934)
N/A	25 Aug 2013	2 Oct 2014	CPAI-2013-2755		Java User Agent Executable Download
High	2 May 2013	23 Sep 2014	CPAI-2013-1701	CVE-2012-5204 CVE-2014-2621	HP Intelligent Management Center IctDownloadServlet Information Disclosure (CVE-2012-5204; CVE-2014-2621)
High	5 May 2013	23 Sep 2014	CPAI-2013-1707	CVE-2012-5202 CVE-2014-2620	HP Intelligent Management Center FaultDownloadServlet Information Disclosure (CVE-2012-5202; CVE-2014-2620)
High	2 Jun 2013	22 Sep 2014	CPAI-2013-1844		Wordpress W3 Total Cache PHP Code Execution
Critical	11 Jul 2013	18 Sep 2014	CPAI-2013-2471	CVE-2008-4250	Microsoft RPC Services Path Canonicalization Remote Code Execution (CVE-2008-4250)
Critical	7 Feb 2013	17 Aug 2014	CPAI-2013-092	CVE-2013-0634	Adobe Flash Player ActionScript Code Heap Buffer Overflow (APSB13-04; CVE-2013-0634)
High	3 Apr 2013	14 Aug 2014	CPAI-2013-008		VideoLAN VLC Media Player SWF Code Execution
Critical	12 Nov 2013	12 Aug 2014	CPAI-2013-3535	CVE-2013-5763 CVE-2013-5879	Oracle Outside In OS 2 Metafile Parser stack buffer overflow (CVE-2013-5763; CVE-2013-5879)
Critical	30 Apr 2013	29 Jul 2014	CPAI-2013-1688	CVE-2004-0790	Multiple Vendor ICMP Connection Reset Denial of Service - High Confidence (CVE-2004-0790)
High	10 Dec 2013	30 Jun 2014	CPAI-2014-0371	CVE-2013-2551	Suspicious Javascript Variable Names (CVE-2013-2551)
Critical	22 Apr 2013	16 Jun 2014	CPAI-2013-1678	CVE-2010-2221	iSCSI target Multiple Implementations iSNS Stack Buffer Overflow - High Confidence (CVE-2010-2221)
High	29 Sep 2013	16 Jun 2014	CPAI-2014-1636	CVE-2013-3617 CVE-2013-4152 CVE-2013-6429 CVE-2014-0002 CVE-2014-0423	Multiple Products XML Public External Entity Information Disclosure (CVE-2013-3617; CVE-2013-4152; CVE-2013-6429; CVE-2014-0002; CVE-2014-0423)
Medium	24 Mar 2013	15 May 2014	CPAI-2013-1637	CVE-2012-4914	CoolPDF Reader Image Stream Processing Buffer Overflow (CVE-2012-4914)
High	3 Apr 2013	15 May 2014	CPAI-2013-1647	CVE-2012-3282	HP LeftHand Virtual SAN Appliance hydra Credential Information Disclosure (CVE-2012-3282)
Critical	26 Dec 2013	15 May 2014	CPAI-2013-3759	CVE-2013-6420	PHP OpenSSL Extension X.509 Certificate Memory Corruption (CVE-2013-6420)
High	3 Mar 2013	12 May 2014	CPAI-2013-1314	CVE-2012-0677	Apple iTunes m3u Playlist Multiple Buffer Overflows - High Confidence (CVE-2012-0677)
Critical	27 Jun 2013	7 May 2014	CPAI-2006-302	CVE-2013-0757 CVE-2013-0758	Mozilla Firefox Flash Privileged Code Injection (CVE-2013-0757; CVE-2013-0758)
Critical	27 Oct 2013	30 Apr 2014	CPAI-2013-3512	CVE-2010-5107	OpenSSH maxstartup Threshold Connection Exhaustion denial of service (CVE-2010-5107)
Critical	5 Feb 2013	27 Apr 2014	CPAI-2013-087	CVE-2013-0928	EMC AlphaStor Device Manager Command Injection - Improved performance (CVE-2013-0928)
High	12 Mar 2013	27 Apr 2014	CPAI-2013-1339	CVE-2013-0080	Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)
Critical	26 Nov 2013	17 Apr 2014	CPAI-2013-3610	CVE-2013-4835	HP SiteScope issueSiebelCmd SOAP Request Code Execution (CVE-2013-4835)
Medium	22 May 2013	13 Apr 2014	CPAI-2013-1835	CVE-2013-3238	PhpMyAdmin preg_replace Function Code Injection (CVE-2013-3238)
Medium	12 Aug 2013	1 Apr 2014	CPAI-2013-2748	CVE-2013-3663	Trimble Navigation SketchUp BMP File Code Execution (CVE-2013-3663)
Critical	29 Dec 2013	27 Mar 2014	CPAI-2013-3763	CVE-2013-5791	Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)
Critical	8 Oct 2013	26 Mar 2014	CPAI-2013-2981	CVE-2013-3128	Microsoft .NET Framework OpenType Font Parsing Remote Code Execution (MS13-082; CVE-2013-3128)
Critical	30 Dec 2013	16 Mar 2014	CPAI-2013-3764	CVE-2013-5332	Adobe Flash Player Memory Corruption (APSB13-28: CVE-2013-5332)
High	27 Aug 2013	9 Mar 2014	CPAI-2013-2893		PineApp Mail-SeCure confpremenu.php Export Log Command Injection
Medium	5 Nov 2013	3 Mar 2014	CPAI-2013-3536	CVE-2013-6275	Horde Groupware Webmail Edition Ingo Filter Cross-Site Request Forgery (CVE-2013-6275)
High	29 Sep 2013	20 Feb 2014	CPAI-2013-2962	CVE-2013-4152 CVE-2013-6429	SpringSource Spring Framework XML External Entity Information Disclosure (CVE-2013-4152; CVE-2013-6429)
High	26 Feb 2013	19 Feb 2014	CPAI-2013-1318	CVE-2013-1638	Opera SVG clipPath Use After Free Memory Corruption (CVE-2013-1638)
Critical	8 Jan 2013	17 Feb 2014	CPAI-2013-004	CVE-2013-0013	Microsoft SSL and TLS Protocol Security Feature Bypass (MS13-006; CVE-2013-0013)
Medium	31 Dec 2013	5 Feb 2014	CPAI-2014-0372	CVE-2013-2551	Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)
Critical	10 Dec 2013	22 Jan 2014	CPAI-2013-3622	CVE-2013-5056	Microsoft Scripting Runtime Object Library Use-After-Free Code Execution (MS13-099; CVE-2013-5056)
Critical	10 Dec 2013	20 Jan 2014	CPAI-2013-3613	CVE-2013-3900	Microsoft Windows WinVerifyTrust Signature Validation Code Execution (MS13-098; CVE-2013-3900)
Critical	7 Aug 2013	16 Jan 2014	CPAI-2013-2536	CVE-2012-0267	NTR ActiveX Control StopModule() Remote Code Execution (CVE-2012-0267)
High	10 Sep 2013	16 Jan 2014	CPAI-2013-2903	CVE-2013-3137	Microsoft FrontPage XML Information Disclosure (MS13-078; CVE-2013-3137)
High	28 Oct 2013	16 Jan 2014	CPAI-2013-2890	CVE-2013-3192	Microsoft Internet Explorer EUC-JP Character Encoding Cross Site Scripting (MS13-059; CVE-2013-3192)