Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Check Point Reference	Source	Description
High	17 Feb 2013	CPAI-2013-032		Scada Modbus Restart Communications Option
Critical	3 Mar 2013	CPAI-2013-1311	CVE-2012-5958	Portable SDK for UPnP Devices libupnp Device Service Name Stack Buffer Overflow (CVE-2012-5958)
Critical	3 Mar 2013	CPAI-2013-1296	CVE-2013-0638	Adobe Flash Player malformed FLV file Flash memory corruption vulnerability (APSB13-05; CVE-2013-0638)
High	3 Mar 2013	CPAI-2013-093		Adobe InDesign Server SOAP Request Lack of Authentication
High	3 Mar 2013	CPAI-2013-086	CVE-2013-0393	Oracle Outside In Paradox Database Stream Filter Denial of Service (CVE-2013-0393)
High	3 Mar 2013	CPAI-2013-012	CVE-2012-5691	RealNetworks RealPlayer URL Parsing Stack Buffer Overflow (CVE-2012-5691)
High	28 Feb 2013	CPAI-2013-1327	CVE-2013-0648	Adobe Flashplayer Malicious SWF Use After Free Code Execution (CVE-2013-0648)
Critical	27 Feb 2013	CPAI-2013-1323	CVE-2013-1592	SAP NetWeaver Message Server Memory Corruption (CVE-2013-1592)
Critical	3 Mar 2013	CPAI-2012-1282		Novell NetIQ Privileged User Manager modifyAccounts Policy Bypass
Medium	3 Mar 2013	CPAI-2012-1335	CVE-2012-4939	SolarWinds Orion IPAM Reflected Cross-site Scripting (CVE-2012-4939)
High	3 Mar 2013	CPAI-2012-1323		Lattice Semiconductor ispVM System XCF File Handling Overflow
High	12 Mar 2013	CPAI-2013-1602	CVE-2010-0476	Microsoft SMB Response Parsing Memory Corruption (MS10-020; CVE-2010-0476) - High Confidence
High	12 Mar 2013	CPAI-2013-1601	CVE-2012-1863	Microsoft SharePoint Reflected List Parameter Cross-site Scripting (SA49875; CVE-2012-1863)
Critical	12 Mar 2013	CPAI-2013-1598	CVE-2013-1288	Internet Explorer CTreeNode Use After Free Remote Code Execution (MS13-021; CVE-2013-1288)
High	12 Mar 2013	CPAI-2013-1597	CVE-2013-0086	Microsoft Office OneNote Parsing Memory Information Disclosure (MS13-025; CVE-2013-0086)
High	12 Mar 2013	CPAI-2013-1596	CVE-2013-0084	Microsoft SharePoint Directory Traversal (MS13-024; CVE-2013-0084)
Critical	12 Mar 2013	CPAI-2013-1595	CVE-2013-0092	Internet Explorer GetMarkupPtr Use After Free Code Execution (MS13-021; CVE-2013-0092)
High	7 Mar 2013	CPAI-2013-1343	CVE-2005-0817	Symantec Gateway Products DNS Cache Poisoning - High Confidence (CVE-2005-0817)
Critical	7 Mar 2013	CPAI-2013-1342	CVE-2013-0093	Internet Explorer CCommand Use After Free (MS13-021; CVE-2013-0093)
Critical	7 Mar 2013	CPAI-2013-1341	CVE-2013-0087	Internet Explorer OnResize Use After Free Remote Code Execution (MS13-021; CVE-2013-0087)
High	7 Mar 2013	CPAI-2013-1339	CVE-2013-0080	Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)
Critical	6 Mar 2013	CPAI-2013-030	CVE-2012-0432	Novell eDirectory NCP Stack Buffer Overflow (CVE-2012-0432)
High	6 Mar 2013	CPAI-2013-006		Sophos Anti-Virus RAR VMSF_DELTA Filter Signedness Error
High	5 Mar 2013	CPAI-2013-1322	CVE-2013-0002	Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002)
High	5 Mar 2013	CPAI-2013-1321	CVE-2013-0003	Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow (CVE-2013-0003)
High	21 Mar 2013	CPAI-2013-1633	CVE-2008-1434	Microsoft Word CSS Processing Code Execution - Improved Performance (MS08-026; CVE-2008-1434)
High	21 Mar 2013	CPAI-2013-1632	CVE-2012-3569	VMware OVF Tool Format String Vulnerability (CVE-2012-3569)
Critical	21 Mar 2013	CPAI-2013-1631	CVE-2012-3285	HP LeftHand Virtual SAN Appliance hydra Ping Processing Buffer Overflow (CVE-2012-3285)
Critical	21 Mar 2013	CPAI-2013-1630	CVE-2012-0830	PHP php_register_variable_ex Function Code Execution - Improved performance (CVE-2012-0830)
High	21 Mar 2013	CPAI-2013-1629		Sophos Anti-Virus CAB Files Invalid typeCompress Parsing Heap Buffer Overflow - Improved Performance
High	17 Mar 2013	CPAI-2013-1623	CVE-2012-5470	VideoLAN VLC Media Player PNG Code Execution - Improved Performance (CVE-2012-5470)
Medium	13 Mar 2013	CPAI-2013-1606		DNS ANY Request
Critical	12 Mar 2013	CPAI-2013-1594	CVE-2013-0079	Microsoft Visio Viewer Tree Object Type Confusion Code Execution (MS13-023; CVE-2013-0079)
Critical	12 Mar 2013	CPAI-2013-1332	CVE-2013-0091	Internet Explorer CElement Use After Free Code Execution (MS13-021; CVE-2013-0091)
Critical	12 Mar 2013	CPAI-2013-1331	CVE-2013-0088	Internet Explorer saveHistory Use After Free Code Execution (MS13-021; CVE-2013-0088)
Critical	12 Mar 2013	CPAI-2013-1329	CVE-2013-0083	Microsoft SharePoint Web Analytics Cross-Site Scripting (MS13-024; CVE-2013-0083)
Critical	12 Mar 2013	CPAI-2013-1328	CVE-2013-0089	Internet Explorer CMarkupBehaviorContext use after free (MS13-021; CVE-2013-0089)
Medium	12 Mar 2013	CPAI-2013-1324	CVE-2013-1281	Microsoft Windows NFS Server NULL Pointer Dereference (MS13-014; CVE-2013-1281)
Critical	9 Apr 2013	CPAI-2013-1652		BIND 9 DNS Server Dynamic Update Denial of Service - High Confidnce
Critical	8 Apr 2013	CPAI-2013-1640	CVE-2012-3284	HP LeftHand Virtual SAN Appliance hydra SNMP Processing Buffer Overflow (CVE-2012-3284)
High	8 Apr 2013	CPAI-2013-1599		Microsoft Internet Explorer Mouse Movement Information Disclosure
High	8 Apr 2013	CPAI-2013-027		Simple Web Server Connection Header Buffer Overflow
Critical	4 Apr 2013	CPAI-2013-1651	CVE-2012-3283	HP LeftHand Virtual SAN Appliance hydra Diag Processing Buffer Overflow (CVE-2012-3283)
High	4 Apr 2013	CPAI-2013-1326	CVE-2013-1489	Oracle Java Security Slider Feature Bypass (CVE-2013-1489)
Critical	4 Apr 2013	CPAI-2013-094	CVE-2013-0657	Schneider Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2013-0657)
Critical	4 Apr 2013	CPAI-2013-034	CVE-2012-4607	EMC NetWorker nsrindexd RPC Service Buffer Overflow (CVE-2012-4607)
Critical	28 Mar 2013	CPAI-2013-1639	CVE-2012-6275	BigAnt Server SCH Request Stack Buffer Overflow (CVE-2012-6275)
High	24 Mar 2013	CPAI-2013-1636	CVE-2013-0809	Oracle Java 2D ImagingLib Integer Overflow (CVE-2013-0809)
High	24 Mar 2013	CPAI-2013-1635	CVE-2012-4558	Apache HTTPD mod_proxy_balancer Cross Site Scripting (CVE-2012-4558)
High	23 Apr 2013	CPAI-2013-1677	CVE-2012-3754	Apple QuickTime ActiveX Control Clear Method Use After Free - Improved Performance (CVE-2012-3754)