Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Critical	22 Dec 2013	14 Jan 2014	CPAI-2013-3752	CVE-2013-1978	GIMP XWD File Handling Heap Buffer Overflow (CVE-2013-1978)
High	19 Feb 2013	13 Jan 2014	CPAI-2013-084	CVE-2013-0625	Adobe ColdFusion scheduleedit.cfm Authentication Bypass (CVE-2013-0625)
Critical	17 Jan 2013	12 Jan 2014	CPAI-2013-1308	CVE-2012-0006	Microsoft DNS Server Denial of Service - Specific (MS12-017; CVE-2012-0006)
Medium	5 May 2013	12 Jan 2014	CPAI-2013-1889	CVE-2011-1574	VideoLAN VLC Media Player Libmodplug ReadS3M Stack Overflow (CVE-2011-1574)
High	8 Aug 2013	12 Jan 2014	CPAI-2013-2537	CVE-2012-0266	NTR ActiveX Control Check() Method Buffer Overflow (CVE-2012-0266)
Critical	8 Jan 2013	8 Jan 2014	CPAI-2012-1343	CVE-2007-2137	IBM Tivoli Monitoring Express Universal Agent Code Execution (CVE-2007-2137)
Critical	29 Dec 2013	8 Jan 2014	CPAI-2013-3760	CVE-2013-5329	Adobe Flash Player Memory Corruption (APSB13-26: CVE-2013-5329)
Critical	7 Jan 2013	7 Jan 2014	CPAI-2013-001	CVE-2008-1855	McAfee ePolicy Orchestrator Framework Services HTTP Code Injection (CVE-2008-1855)
High	2 Apr 2013	6 Jan 2014	CPAI-2013-1644	CVE-2013-0074 CVE-2013-3896	Microsoft Silverlight Pointer Dereference Memory Corruption (MS13-022; CVE-2013-0074; CVE-2013-3896)
High	23 Apr 2013	5 Jan 2014	CPAI-2013-013		Foxit Reader Plugin for Firefox URL String Stack Buffer Overflow
Critical	12 Nov 2013	3 Jan 2014	CPAI-2013-3528	CVE-2013-3918	Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution (MS13-090; CVE-2013-3918)
High	7 May 2013	1 Jan 2014	CPAI-2013-1804		Squid Proxy httpMakeVaryMark Header Value Denial of Service
High	13 Oct 2013	1 Jan 2014	CPAI-2013-3475	CVE-2006-2371	Microsoft Windows RAS Manager Registry Corruption (CVE-2006-2371)
High	19 Dec 2013	31 Dec 2013	CPAI-2013-3749		ABB MicroSCADA Wserver Command Execution
High	31 Dec 2013	31 Dec 2013	CPAI-2013-3767		ABB MicroSCADA Wserver Multiple Buffer Overflows
Critical	28 Jul 2013	29 Dec 2013	CPAI-2013-2506	CVE-2012-1182	Samba SetInformationPolicy AuditEventsInfo Heap Overflow (CVE-2012-1182)
High	8 Apr 2013	25 Dec 2013	CPAI-2013-027		Simple Web Server Connection Header Buffer Overflow
High	21 Apr 2013	25 Dec 2013	CPAI-2013-1665	CVE-2012-3753	Apple QuickTime Plugin Content-Type Buffer Overflow - Improved Performance (CVE-2012-3753)
Critical	25 Apr 2013	25 Dec 2013	CPAI-2013-1302	CVE-2013-0930	EMC AlphaStor Device Manager Buffer Overflow - High Confidence (CVE-2013-0930)
High	1 Jul 2013	25 Dec 2013	CPAI-2013-2168	CVE-2013-3843	Monkey HTTPD Header Parsing Denial of Service (CVE-2013-3843)
High	3 Dec 2013	24 Dec 2013	CPAI-2013-3646	CVE-2013-3828	Oracle BPEL Process Manager ScriptServlet Information Disclosure (CVE-2013-3828)
Critical	24 Dec 2013	24 Dec 2013	CPAI-2013-3753	CVE-2011-3142	WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)
High	25 Nov 2013	23 Dec 2013	CPAI-2013-3609	CVE-2013-5696	GLPI install.php Remote Command Execution (CVE-2013-5696)
High	24 Mar 2013	22 Dec 2013	CPAI-2013-1636	CVE-2013-0809	Oracle Java 2D ImagingLib Integer Overflow (CVE-2013-0809)
High	30 Sep 2013	22 Dec 2013	CPAI-2013-2967	CVE-2013-2472	Oracle Java Runtime Environment ShortComponentRaster.verify Memory Corruption (CVE-2013-2472)
Critical	22 Dec 2013	22 Dec 2013	CPAI-2013-3669	CVE-2009-2152	AdaptWeb Web Application SCADA SQL Injection (CVE-2009-2152)
High	10 Apr 2013	18 Dec 2013	CPAI-2013-1657	CVE-2007-6435	Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow - High Confidence (CVE-2007-6435)
Critical	28 May 2013	18 Dec 2013	CPAI-2008-247	CVE-2008-0394	Citadel SMTP RCPT Remote Buffer Overflow - High Confidence (CVE-2008-0394)
Critical	17 Nov 2013	18 Dec 2013	CPAI-2013-3562	CVE-2013-3353	Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3353)
High	2 Dec 2013	18 Dec 2013	CPAI-2013-3631	CVE-2010-2730	Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730)
High	29 May 2013	16 Dec 2013	CPAI-2005-191	CVE-2005-0241	Squid Proxy Oversized Reply Header Handling - Improved Performance (CVE-2005-0241)
Critical	17 Nov 2013	15 Dec 2013	CPAI-2013-3557	CVE-2013-4824	HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)
High	11 Dec 2013	12 Dec 2013	CPAI-2013-3689	CVE-2013-3869	Microsoft Windows X.509 Certificate Validation Denial of Service (MS13-095; CVE-2013-3869)
Critical	11 Dec 2013	11 Dec 2013	CPAI-2013-3690		ANSSI Improperly Issued Digital Certificates HTTPS Spoofing
High	1 Jul 2013	10 Dec 2013	CPAI-2013-1687		Web Servers HTTP POST Denial of Service
High	10 Dec 2013	10 Dec 2013	CPAI-2013-3614	CVE-2013-5051	Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5051)
N/A	10 Dec 2013	10 Dec 2013	CPAI-2013-3632	CVE-2013-3900	Portable Executable Files With Weak Encryption (CVE-2013-3900)
High	3 Jun 2013	9 Dec 2013	CPAI-2013-1853	CVE-2013-1488	Oracle Java java.sql.DriverManager Sandbox Bypass (CVE-2013-1488)
High	4 Jul 2013	8 Dec 2013	CPAI-2013-2447		Web Servers HTTP POST Overly Large Content-Length Denial of Service
High	27 Feb 2013	5 Dec 2013	CPAI-2013-1319	CVE-2013-0249	cURL and libcurl MD5 Digest Buffer Overflow (CVE-2013-0249)
Critical	10 Sep 2013	5 Dec 2013	CPAI-2013-2919	CVE-2013-1330 CVE-2013-5059	Microsoft SharePoint Server MAC Disabled Remote Code Execution (MS13-067; CVE-2013-1330; CVE-2013-5059)
Critical	4 Dec 2013	4 Dec 2013	CPAI-2013-3651	CVE-2013-3918	Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution - ver 2 (CVE-2013-3918)
Critical	4 Dec 2013	4 Dec 2013	CPAI-2013-3687	CVE-2013-5743	Zabbix Multiple SQL Injections Information Disclosure (CVE-2013-5743)
Critical	11 Sep 2013	2 Dec 2013	CPAI-2013-2932	CVE-2013-2362	HP System Management Homepage iprange Stack Buffer Overflow (CVE-2013-2362)
High	14 Nov 2013	1 Dec 2013	CPAI-2013-3552	CVE-2009-1857	Adobe Reader And Acrobat TrueType Font Handling Remote Memory Corruption (CVE-2009-1857)
High	28 Nov 2013	28 Nov 2013	CPAI-2013-3619	CVE-2013-5065	Microsoft Windows NDProxy.sys Elevation of Privilege (CVE-2013-5065)
High	20 Jan 2013	25 Nov 2013	CPAI-2013-029	CVE-2012-5976 CVE-2013-2686	Digium Asterisk HTTP Management Interface Stack Overflow (CVE-2012-5976; CVE-2013-2686)
High	14 Nov 2013	25 Nov 2013	CPAI-2013-3554	CVE-2013-4466	GnuTLS DANE dane.c Heap Buffer Overflow (CVE-2013-4466)
High	29 Sep 2013	24 Nov 2013	CPAI-2013-2964	CVE-2013-2577	XnView PCT File Processing Buffer Overflow (CVE-2013-2577)
High	29 Oct 2013	24 Nov 2013	CPAI-2013-3519	CVE-2013-2912	Google Chrome NotifyInstanceWasDeleted Use After Free (CVE-2013-2912)