Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Critical	19 Nov 2013	24 Nov 2013	CPAI-2013-3568	CVE-2010-2202	Adobe Acrobat and Reader CLOD Progressive Mesh Continuation Memory Corruption (CVE-2010-2202)
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3592		Oracle Outside In OS 2 Metafile Parser Heap Buffer Overflow
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3569		VBulletin Content Management System Administrator Injection Remote Code Execution
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3588	CVE-2009-1861	Adobe Reader And Acrobat PDF JBIG2 Stream Heap Memory Corruption (CVE-2009-1861)
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3586		Nagios Core Config Manager tfPassword SQL Injection
Critical	17 Nov 2013	21 Nov 2013	CPAI-2013-3575	CVE-2013-3357	Adobe Acrobat and Reader Integer Overflow (APSB13-22: CVE-2013-3357)
Critical	17 Nov 2013	20 Nov 2013	CPAI-2013-3561	CVE-2013-3361	Adobe Flash Player Crafted SWF File Memory Corruption (APSB13-21; CVE-2013-3361)
Critical	17 Nov 2013	20 Nov 2013	CPAI-2013-3558	CVE-2009-1859	Adobe Reader And Acrobat PDF Memory Corruption (CVE-2009-1859)
Critical	20 Nov 2013	20 Nov 2013	CPAI-2013-3577	CVE-2013-3355	Adobe Acrobat and Reader Memory Corruption (APSB13-22: CVE-2013-3355)
Medium	15 Oct 2013	19 Nov 2013	CPAI-2013-3481	CVE-2012-0262	OP5 welcome Remote Command Execution (CVE-2012-0262)
Critical	18 Nov 2013	18 Nov 2013	CPAI-2013-3496	CVE-2013-5325	Adobe Reader and Acrobat JavaScript scheme URI Remote Code Execution (CVE-2013-5325)
Critical	17 Nov 2013	17 Nov 2013	CPAI-2013-3565	CVE-2013-3363	Adobe Flash Player Memory Corruption (APSB13-21: CVE-2013-3363)
Critical	17 Nov 2013	17 Nov 2013	CPAI-2013-3564	CVE-2013-3362	Adobe Flash Player Memory Corruption (APSB13-21: CVE-2013-3362)
N/A	10 Sep 2013	12 Nov 2013	CPAI-2013-2916	CVE-2009-0088 CVE-2013-0082 CVE-2013-1324 CVE-2013-1325	WPD files (CVE-2009-0088; CVE-2013-0082; CVE-2013-1324; CVE-2013-1325)
Medium	31 Oct 2013	12 Nov 2013	CPAI-2013-3521	CVE-2007-5461	Apache Tomcat WebDav Remote Information Disclosure (CVE-2007-5461)
Critical	5 Nov 2013	12 Nov 2013	CPAI-2013-3534	CVE-2013-1084	Novell ZENworks Configuration Management umaninv Information Disclosure (CVE-2013-1084)
Critical	12 Nov 2013	12 Nov 2013	CPAI-2013-3550	CVE-2008-1910	Borland Software InterBase ibserver.exe Service Attach Request Buffer Overflow (CVE-2008-1910)
Critical	12 Nov 2013	12 Nov 2013	CPAI-2013-3520	CVE-2011-4042 CVE-2011-4043 CVE-2011-4044 CVE-2011-4045	ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043; CVE-2011-4044; CVE-2011-4045)
High	12 Nov 2013	12 Nov 2013	CPAI-2013-3541		Supermicro Onboard IPMI Authenticated Directory Traversal
High	10 Sep 2013	11 Nov 2013	CPAI-2013-2929	CVE-2013-3848	Microsoft Word Memory Corruption (MS13-072: CVE-2013-3848)
High	23 Apr 2013	10 Nov 2013	CPAI-2013-1677	CVE-2012-3754	Apple QuickTime ActiveX Control Clear Method Use After Free - Improved Performance (CVE-2012-3754)
High	23 Jun 2013	10 Nov 2013	CPAI-2013-1903	CVE-2013-1091	Novell iPrint Client For Windows IPP Response Stack Buffer Overflow (CVE-2013-1091)
Critical	13 Aug 2013	10 Nov 2013	CPAI-2013-2517	CVE-2013-3181	Microsoft Windows Uniscribe Font Parsing Engine Memory Corruption (MS13-060; CVE-2013-3181)
High	10 Nov 2013	10 Nov 2013	CPAI-2013-3509		Belkin Linksys WRT54GL apply.cgi Remote Command Execution
High	28 Apr 2013	7 Nov 2013	CPAI-2013-1685	CVE-2013-2423	Java Applet Reflection Type Confusion Remote Code Execution (CVE-2013-2423)
High	6 Nov 2013	6 Nov 2013	CPAI-2013-3493		Belkin Linksys Multiple Products Directory Traversal
N/A	13 Aug 2013	4 Nov 2013	CPAI-2013-2468	CVE-2013-3175	Microsoft Windows RPC Elevation Of Privilege (MS13-062; CVE-2013-3175)
Low	30 Sep 2013	3 Nov 2013	CPAI-2013-2938		TCP Off-Path Sequence Inference
High	21 Oct 2013	3 Nov 2013	CPAI-2013-3495	CVE-2013-1391	Multiple Products DVR Configuration Disclosure (CVE-2013-1391)
Medium	3 Nov 2013	3 Nov 2013	CPAI-2013-3502	CVE-2010-2772	Siemens Simatic SCADA WINCC SQL Insecure Default Credentials Security Bypass (CVE-2010-2772)
High	3 Nov 2013	3 Nov 2013	CPAI-2013-3507	CVE-2013-0653	GE Intelligent Platforms Proficy SCADA Substitute.bcl Directory Traversal (CVE-2013-0653)
High	22 Oct 2013	31 Oct 2013	CPAI-2013-3501	CVE-2013-1899	PostgreSQL Database Name Command Line Flag Injection (CVE-2013-1899)
High	31 Oct 2013	31 Oct 2013	CPAI-2013-3522	CVE-2013-0629	Adobe ColdFusion scheduleedit.cfm Directory Traversal (CVE-2013-0629)
High	12 Mar 2013	29 Oct 2013	CPAI-2013-1596	CVE-2013-0084	Microsoft SharePoint Directory Traversal (MS13-024; CVE-2013-0084)
Critical	29 Oct 2013	29 Oct 2013	CPAI-2013-3518	CVE-2013-4822	HP Intelligent Management Center BIMS UploadServlet Arbitrary File Upload (CVE-2013-4822)
Critical	11 Sep 2013	28 Oct 2013	CPAI-2013-2934	CVE-2013-0753	Mozilla Firefox XMLSerializer use-after-free (CVE-2013-0753)
High	5 Mar 2013	27 Oct 2013	CPAI-2013-1335	CVE-2013-0431	Oracle Java JMX findClass and elementFromComplex Sandbox Breach (CVE-2013-0431)
High	18 Aug 2013	27 Oct 2013	CPAI-2013-2867	CVE-2013-1690	Mozilla Firefox onreadystatechange Use After Free (CVE-2013-1690)
Critical	20 Oct 2013	27 Oct 2013	CPAI-2013-3494	CVE-2013-1625	Titan FTP Administrative Password Disclosure (CVE-2013-1625)
High	22 Oct 2013	27 Oct 2013	CPAI-2013-3499	CVE-2013-4823	HP Intelligent Management Center BIMS bimsDownload Information Disclosure (CVE-2013-4823)
Critical	27 Oct 2013	27 Oct 2013	CPAI-2013-3489		BlackHole Toolkit v2 EXE Payload Stage Code Execution
Critical	27 Oct 2013	27 Oct 2013	CPAI-2013-3488	CVE-2011-0611 CVE-2011-2110	BlackHole Toolkit v2 Flash Player Payload Stage Code Execution (CVE-2011-0611; CVE-2011-2110)
Critical	12 Feb 2013	24 Oct 2013	CPAI-2013-382	CVE-2013-1313	Microsoft Windows Common Controls OLE Remote Code Execution (MS13-020; CVE-2013-1313)
Medium	23 Oct 2013	23 Oct 2013	CPAI-2013-3504	CVE-2011-4449	WikkaWiki Spam Logging PHP Injection (CVE-2011-4449)
Critical	10 Mar 2013	21 Oct 2013	CPAI-2013-1345	CVE-2013-1493	Oracle Java Runtime CMM Code Execution (CVE-2013-1493)
High	6 Jun 2013	21 Oct 2013	CPAI-2013-2490	CVE-2013-3576	HP System Management Home Page Command Injection (CVE-2013-3576)
High	10 Sep 2013	21 Oct 2013	CPAI-2013-2915	CVE-2013-1315	Microsoft Excel Memory Corruption (MS13-067; CVE-2013-1315)
High	3 Jun 2013	20 Oct 2013	CPAI-2013-1855	CVE-2012-4186	Mozilla Multiple Products WAV Processing Buffer Overflow (CVE-2012-4186)
High	11 Sep 2013	20 Oct 2013	CPAI-2013-2933	CVE-2013-2461	Oracle Java SE XML Digital Signature Spoofing (CVE-2013-2461)
High	15 Oct 2013	20 Oct 2013	CPAI-2013-3478	CVE-2013-2641	Sophos Web Protection Appliance patience.cgi Directory Traversal (CVE-2013-2641)