Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	27 Feb 2013	5 Dec 2013	CPAI-2013-1319	CVE-2013-0249	cURL and libcurl MD5 Digest Buffer Overflow (CVE-2013-0249)
Critical	10 Sep 2013	5 Dec 2013	CPAI-2013-2919	CVE-2013-1330 CVE-2013-5059	Microsoft SharePoint Server MAC Disabled Remote Code Execution (MS13-067; CVE-2013-1330; CVE-2013-5059)
Critical	4 Dec 2013	4 Dec 2013	CPAI-2013-3651	CVE-2013-3918	Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution - ver 2 (CVE-2013-3918)
Critical	4 Dec 2013	4 Dec 2013	CPAI-2013-3687	CVE-2013-5743	Zabbix Multiple SQL Injections Information Disclosure (CVE-2013-5743)
Critical	11 Sep 2013	2 Dec 2013	CPAI-2013-2932	CVE-2013-2362	HP System Management Homepage iprange Stack Buffer Overflow (CVE-2013-2362)
High	14 Nov 2013	1 Dec 2013	CPAI-2013-3552	CVE-2009-1857	Adobe Reader And Acrobat TrueType Font Handling Remote Memory Corruption (CVE-2009-1857)
High	28 Nov 2013	28 Nov 2013	CPAI-2013-3619	CVE-2013-5065	Microsoft Windows NDProxy.sys Elevation of Privilege (CVE-2013-5065)
High	20 Jan 2013	25 Nov 2013	CPAI-2013-029	CVE-2012-5976 CVE-2013-2686	Digium Asterisk HTTP Management Interface Stack Overflow (CVE-2012-5976; CVE-2013-2686)
High	14 Nov 2013	25 Nov 2013	CPAI-2013-3554	CVE-2013-4466	GnuTLS DANE dane.c Heap Buffer Overflow (CVE-2013-4466)
High	29 Sep 2013	24 Nov 2013	CPAI-2013-2964	CVE-2013-2577	XnView PCT File Processing Buffer Overflow (CVE-2013-2577)
High	29 Oct 2013	24 Nov 2013	CPAI-2013-3519	CVE-2013-2912	Google Chrome NotifyInstanceWasDeleted Use After Free (CVE-2013-2912)
Critical	19 Nov 2013	24 Nov 2013	CPAI-2013-3568	CVE-2010-2202	Adobe Acrobat and Reader CLOD Progressive Mesh Continuation Memory Corruption (CVE-2010-2202)
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3592		Oracle Outside In OS 2 Metafile Parser Heap Buffer Overflow
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3569		VBulletin Content Management System Administrator Injection Remote Code Execution
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3588	CVE-2009-1861	Adobe Reader And Acrobat PDF JBIG2 Stream Heap Memory Corruption (CVE-2009-1861)
Critical	24 Nov 2013	24 Nov 2013	CPAI-2013-3586		Nagios Core Config Manager tfPassword SQL Injection
Critical	17 Nov 2013	21 Nov 2013	CPAI-2013-3575	CVE-2013-3357	Adobe Acrobat and Reader Integer Overflow (APSB13-22: CVE-2013-3357)
Critical	17 Nov 2013	20 Nov 2013	CPAI-2013-3558	CVE-2009-1859	Adobe Reader And Acrobat PDF Memory Corruption (CVE-2009-1859)
Critical	20 Nov 2013	20 Nov 2013	CPAI-2013-3577	CVE-2013-3355	Adobe Acrobat and Reader Memory Corruption (APSB13-22: CVE-2013-3355)
Medium	15 Oct 2013	19 Nov 2013	CPAI-2013-3481	CVE-2012-0262	OP5 welcome Remote Command Execution (CVE-2012-0262)
Critical	18 Nov 2013	18 Nov 2013	CPAI-2013-3496	CVE-2013-5325	Adobe Reader and Acrobat JavaScript scheme URI Remote Code Execution (CVE-2013-5325)
N/A	10 Sep 2013	12 Nov 2013	CPAI-2013-2916	CVE-2009-0088 CVE-2013-0082 CVE-2013-1324 CVE-2013-1325	WPD files (CVE-2009-0088; CVE-2013-0082; CVE-2013-1324; CVE-2013-1325)
Medium	31 Oct 2013	12 Nov 2013	CPAI-2013-3521	CVE-2007-5461	Apache Tomcat WebDav Remote Information Disclosure (CVE-2007-5461)
Critical	5 Nov 2013	12 Nov 2013	CPAI-2013-3534	CVE-2013-1084	Novell ZENworks Configuration Management umaninv Information Disclosure (CVE-2013-1084)
Critical	12 Nov 2013	12 Nov 2013	CPAI-2013-3550	CVE-2008-1910	Borland Software InterBase ibserver.exe Service Attach Request Buffer Overflow (CVE-2008-1910)
Critical	12 Nov 2013	12 Nov 2013	CPAI-2013-3520	CVE-2011-4042 CVE-2011-4043 CVE-2011-4044 CVE-2011-4045	ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043; CVE-2011-4044; CVE-2011-4045)
High	12 Nov 2013	12 Nov 2013	CPAI-2013-3541		Supermicro Onboard IPMI Authenticated Directory Traversal
High	10 Sep 2013	11 Nov 2013	CPAI-2013-2929	CVE-2013-3848	Microsoft Word Memory Corruption (MS13-072: CVE-2013-3848)
High	23 Apr 2013	10 Nov 2013	CPAI-2013-1677	CVE-2012-3754	Apple QuickTime ActiveX Control Clear Method Use After Free - Improved Performance (CVE-2012-3754)
High	23 Jun 2013	10 Nov 2013	CPAI-2013-1903	CVE-2013-1091	Novell iPrint Client For Windows IPP Response Stack Buffer Overflow (CVE-2013-1091)
Critical	13 Aug 2013	10 Nov 2013	CPAI-2013-2517	CVE-2013-3181	Microsoft Windows Uniscribe Font Parsing Engine Memory Corruption (MS13-060; CVE-2013-3181)
High	10 Nov 2013	10 Nov 2013	CPAI-2013-3509		Belkin Linksys WRT54GL apply.cgi Remote Command Execution
High	28 Apr 2013	7 Nov 2013	CPAI-2013-1685	CVE-2013-2423	Java Applet Reflection Type Confusion Remote Code Execution (CVE-2013-2423)
High	6 Nov 2013	6 Nov 2013	CPAI-2013-3493		Belkin Linksys Multiple Products Directory Traversal
N/A	13 Aug 2013	4 Nov 2013	CPAI-2013-2468	CVE-2013-3175	Microsoft Windows RPC Elevation Of Privilege (MS13-062; CVE-2013-3175)
Low	30 Sep 2013	3 Nov 2013	CPAI-2013-2938		TCP Off-Path Sequence Inference
High	21 Oct 2013	3 Nov 2013	CPAI-2013-3495	CVE-2013-1391	Multiple Products DVR Configuration Disclosure (CVE-2013-1391)
Medium	3 Nov 2013	3 Nov 2013	CPAI-2013-3502	CVE-2010-2772	Siemens Simatic SCADA WINCC SQL Insecure Default Credentials Security Bypass (CVE-2010-2772)
High	3 Nov 2013	3 Nov 2013	CPAI-2013-3507	CVE-2013-0653	GE Intelligent Platforms Proficy SCADA Substitute.bcl Directory Traversal (CVE-2013-0653)
High	22 Oct 2013	31 Oct 2013	CPAI-2013-3501	CVE-2013-1899	PostgreSQL Database Name Command Line Flag Injection (CVE-2013-1899)
High	31 Oct 2013	31 Oct 2013	CPAI-2013-3522	CVE-2013-0629	Adobe ColdFusion scheduleedit.cfm Directory Traversal (CVE-2013-0629)
High	12 Mar 2013	29 Oct 2013	CPAI-2013-1596	CVE-2013-0084	Microsoft SharePoint Directory Traversal (MS13-024; CVE-2013-0084)
Critical	29 Oct 2013	29 Oct 2013	CPAI-2013-3518	CVE-2013-4822	HP Intelligent Management Center BIMS UploadServlet Arbitrary File Upload (CVE-2013-4822)
Critical	11 Sep 2013	28 Oct 2013	CPAI-2013-2934	CVE-2013-0753	Mozilla Firefox XMLSerializer use-after-free (CVE-2013-0753)
High	5 Mar 2013	27 Oct 2013	CPAI-2013-1335	CVE-2013-0431	Oracle Java JMX findClass and elementFromComplex Sandbox Breach (CVE-2013-0431)
High	18 Aug 2013	27 Oct 2013	CPAI-2013-2867	CVE-2013-1690	Mozilla Firefox onreadystatechange Use After Free (CVE-2013-1690)
Critical	20 Oct 2013	27 Oct 2013	CPAI-2013-3494	CVE-2013-1625	Titan FTP Administrative Password Disclosure (CVE-2013-1625)
High	22 Oct 2013	27 Oct 2013	CPAI-2013-3499	CVE-2013-4823	HP Intelligent Management Center BIMS bimsDownload Information Disclosure (CVE-2013-4823)
Critical	27 Oct 2013	27 Oct 2013	CPAI-2013-3489		BlackHole Toolkit v2 EXE Payload Stage Code Execution
Critical	27 Oct 2013	27 Oct 2013	CPAI-2013-3488	CVE-2011-0611 CVE-2011-2110	BlackHole Toolkit v2 Flash Player Payload Stage Code Execution (CVE-2011-0611; CVE-2011-2110)