Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Critical	8 Oct 2013	26 Mar 2014	CPAI-2013-2981	CVE-2013-3128	Microsoft .NET Framework OpenType Font Parsing Remote Code Execution (MS13-082; CVE-2013-3128)
High	27 Aug 2013	9 Mar 2014	CPAI-2013-2893		PineApp Mail-SeCure confpremenu.php Export Log Command Injection
Medium	5 Nov 2013	3 Mar 2014	CPAI-2013-3536	CVE-2013-6275	Horde Groupware Webmail Edition Ingo Filter Cross-Site Request Forgery (CVE-2013-6275)
High	29 Sep 2013	20 Feb 2014	CPAI-2013-2962	CVE-2013-4152 CVE-2013-6429	SpringSource Spring Framework XML External Entity Information Disclosure (CVE-2013-4152; CVE-2013-6429)
High	26 Feb 2013	19 Feb 2014	CPAI-2013-1318	CVE-2013-1638	Opera SVG clipPath Use After Free Memory Corruption (CVE-2013-1638)
Critical	8 Jan 2013	17 Feb 2014	CPAI-2013-004	CVE-2013-0013	Microsoft SSL and TLS Protocol Security Feature Bypass (MS13-006; CVE-2013-0013)
Medium	31 Dec 2013	5 Feb 2014	CPAI-2014-0372	CVE-2013-2551	Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)
Critical	10 Dec 2013	22 Jan 2014	CPAI-2013-3622	CVE-2013-5056	Microsoft Scripting Runtime Object Library Use-After-Free Code Execution (MS13-099; CVE-2013-5056)
Critical	10 Dec 2013	20 Jan 2014	CPAI-2013-3613	CVE-2013-3900	Microsoft Windows WinVerifyTrust Signature Validation Code Execution (MS13-098; CVE-2013-3900)
Critical	7 Aug 2013	16 Jan 2014	CPAI-2013-2536	CVE-2012-0267	NTR ActiveX Control StopModule() Remote Code Execution (CVE-2012-0267)
High	10 Sep 2013	16 Jan 2014	CPAI-2013-2903	CVE-2013-3137	Microsoft FrontPage XML Information Disclosure (MS13-078; CVE-2013-3137)
High	28 Oct 2013	16 Jan 2014	CPAI-2013-2890	CVE-2013-3192	Microsoft Internet Explorer EUC-JP Character Encoding Cross Site Scripting (MS13-059; CVE-2013-3192)
Critical	22 Dec 2013	14 Jan 2014	CPAI-2013-3752	CVE-2013-1978	GIMP XWD File Handling Heap Buffer Overflow (CVE-2013-1978)
High	19 Feb 2013	13 Jan 2014	CPAI-2013-084	CVE-2013-0625	Adobe ColdFusion scheduleedit.cfm Authentication Bypass (CVE-2013-0625)
Critical	17 Jan 2013	12 Jan 2014	CPAI-2013-1308	CVE-2012-0006	Microsoft DNS Server Denial of Service - Specific (MS12-017; CVE-2012-0006)
Medium	5 May 2013	12 Jan 2014	CPAI-2013-1889	CVE-2011-1574	VideoLAN VLC Media Player Libmodplug ReadS3M Stack Overflow (CVE-2011-1574)
High	8 Aug 2013	12 Jan 2014	CPAI-2013-2537	CVE-2012-0266	NTR ActiveX Control Check() Method Buffer Overflow (CVE-2012-0266)
Critical	8 Jan 2013	8 Jan 2014	CPAI-2012-1343	CVE-2007-2137	IBM Tivoli Monitoring Express Universal Agent Code Execution (CVE-2007-2137)
Critical	7 Jan 2013	7 Jan 2014	CPAI-2013-001	CVE-2008-1855	McAfee ePolicy Orchestrator Framework Services HTTP Code Injection (CVE-2008-1855)
High	2 Apr 2013	6 Jan 2014	CPAI-2013-1644	CVE-2013-0074 CVE-2013-3896	Microsoft Silverlight Pointer Dereference Memory Corruption (MS13-022; CVE-2013-0074; CVE-2013-3896)
High	23 Apr 2013	5 Jan 2014	CPAI-2013-013		Foxit Reader Plugin for Firefox URL String Stack Buffer Overflow
Critical	12 Nov 2013	3 Jan 2014	CPAI-2013-3528	CVE-2013-3918	Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution (MS13-090; CVE-2013-3918)
High	7 May 2013	1 Jan 2014	CPAI-2013-1804		Squid Proxy httpMakeVaryMark Header Value Denial of Service
High	13 Oct 2013	1 Jan 2014	CPAI-2013-3475	CVE-2006-2371	Microsoft Windows RAS Manager Registry Corruption (CVE-2006-2371)
High	19 Dec 2013	31 Dec 2013	CPAI-2013-3749		ABB MicroSCADA Wserver Command Execution
High	31 Dec 2013	31 Dec 2013	CPAI-2013-3767		ABB MicroSCADA Wserver Multiple Buffer Overflows
Critical	28 Jul 2013	29 Dec 2013	CPAI-2013-2506	CVE-2012-1182	Samba SetInformationPolicy AuditEventsInfo Heap Overflow (CVE-2012-1182)
High	8 Apr 2013	25 Dec 2013	CPAI-2013-027		Simple Web Server Connection Header Buffer Overflow
High	21 Apr 2013	25 Dec 2013	CPAI-2013-1665	CVE-2012-3753	Apple QuickTime Plugin Content-Type Buffer Overflow - Improved Performance (CVE-2012-3753)
Critical	25 Apr 2013	25 Dec 2013	CPAI-2013-1302	CVE-2013-0930	EMC AlphaStor Device Manager Buffer Overflow - High Confidence (CVE-2013-0930)
High	1 Jul 2013	25 Dec 2013	CPAI-2013-2168	CVE-2013-3843	Monkey HTTPD Header Parsing Denial of Service (CVE-2013-3843)
High	3 Dec 2013	24 Dec 2013	CPAI-2013-3646	CVE-2013-3828	Oracle BPEL Process Manager ScriptServlet Information Disclosure (CVE-2013-3828)
Critical	24 Dec 2013	24 Dec 2013	CPAI-2013-3753	CVE-2011-3142	WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)
High	25 Nov 2013	23 Dec 2013	CPAI-2013-3609	CVE-2013-5696	GLPI install.php Remote Command Execution (CVE-2013-5696)
High	24 Mar 2013	22 Dec 2013	CPAI-2013-1636	CVE-2013-0809	Oracle Java 2D ImagingLib Integer Overflow (CVE-2013-0809)
High	30 Sep 2013	22 Dec 2013	CPAI-2013-2967	CVE-2013-2472	Oracle Java Runtime Environment ShortComponentRaster.verify Memory Corruption (CVE-2013-2472)
Critical	22 Dec 2013	22 Dec 2013	CPAI-2013-3669	CVE-2009-2152	AdaptWeb Web Application SCADA SQL Injection (CVE-2009-2152)
High	10 Apr 2013	18 Dec 2013	CPAI-2013-1657	CVE-2007-6435	Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow - High Confidence (CVE-2007-6435)
Critical	28 May 2013	18 Dec 2013	CPAI-2008-247	CVE-2008-0394	Citadel SMTP RCPT Remote Buffer Overflow - High Confidence (CVE-2008-0394)
Critical	17 Nov 2013	18 Dec 2013	CPAI-2013-3562	CVE-2013-3353	Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3353)
High	2 Dec 2013	18 Dec 2013	CPAI-2013-3631	CVE-2010-2730	Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730)
High	29 May 2013	16 Dec 2013	CPAI-2005-191	CVE-2005-0241	Squid Proxy Oversized Reply Header Handling - Improved Performance (CVE-2005-0241)
Critical	17 Nov 2013	15 Dec 2013	CPAI-2013-3557	CVE-2013-4824	HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)
High	11 Dec 2013	12 Dec 2013	CPAI-2013-3689	CVE-2013-3869	Microsoft Windows X.509 Certificate Validation Denial of Service (MS13-095; CVE-2013-3869)
Critical	11 Dec 2013	11 Dec 2013	CPAI-2013-3690		ANSSI Improperly Issued Digital Certificates HTTPS Spoofing
High	1 Jul 2013	10 Dec 2013	CPAI-2013-1687		Web Servers HTTP POST Denial of Service
High	10 Dec 2013	10 Dec 2013	CPAI-2013-3614	CVE-2013-5051	Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5051)
N/A	10 Dec 2013	10 Dec 2013	CPAI-2013-3632	CVE-2013-3900	Portable Executable Files With Weak Encryption (CVE-2013-3900)
High	3 Jun 2013	9 Dec 2013	CPAI-2013-1853	CVE-2013-1488	Oracle Java java.sql.DriverManager Sandbox Bypass (CVE-2013-1488)
High	4 Jul 2013	8 Dec 2013	CPAI-2013-2447		Web Servers HTTP POST Overly Large Content-Length Denial of Service