Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	12 Feb 2013	12 Feb 2013	CPAI-2013-1052		CVE-2013-0023	Internet Explorer CDispNode Use After Free (MS13-009; CVE-2013-0023)
Critical	12 Feb 2013	12 Feb 2013	CPAI-2013-1266		CVE-2013-0022	Internet Explorer LsGetTrailInfo Use After Free (MS13-009; CVE-2013-0022)
High	20 Jan 2013	20 Jan 2013	CPAI-2013-016		CVE-2012-1537	Microsoft DirectPlay Office File Handling Invalid Memory Free (MS12-082; CVE-2012-1537)
High	20 Jan 2013	20 Jan 2013	CPAI-2013-028		CVE-2013-0626	Adobe Reader Stack Exhaustion Code Execution (APSB13-02; CVE-2013-0626)
Critical	17 Jan 2013	17 Jan 2013	CPAI-2013-025		CVE-2012-1530	Adobe Reader Crafted XSL Remote Code Execution (APSB13-02; CVE-2012-1530)
High	17 Jan 2013	17 Jan 2013	CPAI-2013-020		CVE-2013-0621	Adobe Reader Crafted JP2K Heap Overflow (APSB13-02; CVE-2013-0621)
Critical	17 Jan 2013	17 Jan 2013	CPAI-2013-019		CVE-2013-0623	Adobe Acrobat Reader True Type Font Parsing Remote Code Execution (APSB13-02; CVE-2013-0623)
Critical	17 Jan 2013	17 Jan 2013	CPAI-2013-024		CVE-2013-0622	Adobe Reader Malformed JavaScript Security Bypass (APSB13-02; CVE-2013-0622)
High	15 Jan 2013	15 Jan 2013	CPAI-2013-005		CVE-2011-2750	Novell File Reporter Agent Arbitrary File Delete (CVE-2011-2750)
High	14 Jan 2013	14 Jan 2013	CPAI-2013-014		CVE-2009-0075	Microsoft IE Dangling Function Pointer Memory Corruption (MS09-002; CVE-2009-0075)
Medium	13 Jan 2013	13 Jan 2013	CPAI-2012-840		CVE-2012-2982	Webmin show.cgi Command Execution (CVE-2012-2982)
High	8 Jan 2013	8 Jan 2013	CPAI-2012-1341		CVE-2008-1979	CA BrightStor ARCserve Backup Discovery Service Buffer Over-Read (CVE-2008-1979)
Medium	8 Jan 2013	8 Jan 2013	CPAI-2012-1308			NetDecision NOCVision Server Directory Traversal
Critical	8 Jan 2013	8 Jan 2013	CPAI-2012-1342		CVE-2007-5530	Oracle Database Control Component Denial of Service (CVE-2007-5530)
High	8 Jan 2013	8 Jan 2013	CPAI-2012-1347		CVE-2013-0010	Microsoft SCOM Web Console Cross-Site Scripting (MS13-003; CVE-2013-0010)
Critical	8 Jan 2013	8 Jan 2013	CPAI-2012-1346		CVE-2013-0007	Microsoft Windows MSXML XSLT Remote Code Execution (MS13-002; CVE-2013-0007)
High	8 Jan 2013	8 Jan 2013	CPAI-2012-1344		CVE-2005-4216	Macromedia Flash Media Server Malformed Data Denial of Service (CVE-2005-4216)
High	8 Jan 2013	8 Jan 2013	CPAI-2012-1340		CVE-2013-0009	Microsoft System Center Operations Manager Cross-Site Scripting (MS13-003; CVE-2013-0009)
High	8 Jan 2013	8 Jan 2013	CPAI-2013-002		CVE-2006-0900	FreeBSD nfsd NFS Mount Request Data Length Denial of Service (CVE-2006-0900)
High	6 Jan 2013	7 Jan 2013	CPAI-2013-415		CVE-2005-0611	RealNetworks RealPlayer WAV File Processing Code Execution (CVE-2005-0611)
High	7 Jan 2013	7 Jan 2013	CPAI-2013-773		CVE-2006-4018	ClamAV UPX File Handling Heap Code Execution (CVE-2006-4018)
Critical	7 Jan 2013	7 Jan 2013	CPAI-2013-816		CVE-2006-0002	Microsoft Exchange and Outlook TNEF Decoding Code Execution (CVE-2006-0002)
High	7 Jan 2013	7 Jan 2013	CPAI-2013-815		CVE-2008-4564	IBM Lotus Notes WPD Attachment Handling Code Execution (CVE-2008-4564)
Critical	7 Jan 2013	7 Jan 2013	CPAI-2012-1322		CVE-2012-5268	Adobe Flash Player Malformed Actions Remote Code Execution (APSB12-22; CVE-2012-5268)
Medium	6 Jan 2013	6 Jan 2013	CPAI-2012-1312		CVE-2012-2983	Webmin edit_html.cgi file Parameter Traversal Arbitrary File Access (CVE-2012-2983)
Critical	2 Dec 2013	1 Jan 2013	CPAI-2013-3549	CVE-2013-5763		Oracle Outside In OS 2 Metafile Parser Stack Buffer Overflow (CVE-2013-5763)
High	23 Apr 2013	1 Jan 2013	CPAI-2013-1603	CVE-2012-0021		Apache HTTPD mod_log_config Cookie Handling Denial of Service - High Confidence (CVE-2012-0021)
High	17 Feb 2013	1 Jan 2013	CPAI-2013-1298			Scada Modbus Function Code Scan
High	4 Jun 2013	1 Jan 2013	CPAI-2013-1856	CVE-2013-1331		Preemptive Protection against Microsoft Office File Parsing Buffer Overflow (MS13-051; CVE-2013-1331)
Critical	11 Jun 2013	1 Jan 2013	CPAI-2013-1888	CVE-2013-3138		Preemptive Protection against Microsoft Windows TCP/IP Driver Denial of Service (MS13-049; CVE-2013-3138)
Medium	17 Feb 2013	1 Jan 2013	CPAI-2013-1268	CVE-2007-6401		3ivx MPEG-4 MP4 File Handling Stack Overflow - Specific (CVE-2007-6401)
High	17 Feb 2013	1 Jan 2013	CPAI-2013-972			Non Compliant Scada Modbus Write File Record
Critical	14 May 2013	1 Jan 2013	CPAI-2013-1823	CVE-2013-1302		Preemptive Protection against Microsoft Lync Remote Code Execution (MS13-035; CVE-2013-1302)
High	19 Mar 2013	1 Jan 2013	CPAI-2013-1626	CVE-2012-0308		Symantec Messaging Gateway Save.do Cross Site Request Forgery - Improved Performance (CVE-2012-0308)
High	25 Aug 2013	1 Jan 2013	CPAI-2013-2756	CVE-2011-3205		Preemptive Protection against Squid idnsALookup DNS Name Handling Buffer Overflow (CVE-2013-4115)
High	20 Mar 2013	1 Jan 2013	CPAI-2013-1628	CVE-2011-3658		Mozilla Firefox Thunderbird SeaMonkey nsSVGValue Memory Corruption (CVE-2011-3658)
High	9 Jul 2013	1 Jan 2013	CPAI-2013-1914	CVE-2013-0758		Mozilla Firefox Flash Privileged Code Injection (CVE-2013-0758)
High	2 Apr 2013	1 Jan 2013	CPAI-2013-1642			Iconics Genesis SCADA Integer Overflow 0x04b0
Critical	6 Jun 2013	1 Jan 2013	CPAI-2013-1873			Apache Web Server Plesk Control Panel Configuration Code Execution
High	22 Dec 2013	1 Jan 2013	CPAI-2013-3630	CVE-2011-2474		Sybase Multiple Products Directory Traversal (CVE-2011-2474)
Critical	20 Oct 2013	1 Jan 2013	CPAI-2013-2987	CVE-2010-3065		PHP Session Serializer Session Data Injection (CVE-2010-3065)
High	13 Aug 2013	1 Jan 2013	CPAI-2013-2542	CVE-2013-3182		Microsoft DirectAccess ICMP Denial of Service (MS13-064; CVE-2013-3182)
High	12 Nov 2013	1 Jan 2013	CPAI-2013-3546	CVE-2013-3619		Supermicro Onboard IPMI Static SSL Certificate Scanner Information Disclosure (CVE-2013-3619)
High	10 Dec 2013	1 Jan 2013	CPAI-2013-3618	CVE-2013-4547		Preemptive Protection against Nginx Request URI Verification Security Bypass (CVE-2013-4547)
High	30 Jun 2013	1 Jan 2013	CPAI-2013-1634	CVE-2013-0658		Schneider Electric Accutech Manager HTTP Request Processing Buffer Overflow (CVE-2013-0658)
Critical	25 Apr 2013	1 Jan 2013	CPAI-2013-1681	CVE-2013-0930		EMC AlphaStor Device Manager Buffer Overflow - High Confidence (CVE-2013-0930)
High	14 Apr 2013	1 Jan 2013	CPAI-2013-1654	CVE-2012-4170		Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)
High	30 Jun 2013	30 Dec 2012	CPAI-2012-1325	CVE-2012-5679		Adobe Photoshop Camera Raw TIFF Image Processing Buffer Underflow (CVE-2012-5679)
Medium	9 Jan 2013	1 Jan 2012	CPAI-2012-1348			Wibu-Systems WibuKey Runtime for Windows ActiveX Control Buffer Overflow
High	7 Jan 2013		CPAI-2013-827			RabidHamster Log Entry sprintf() Buffer Overflow