Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Check Point Reference	Source	Description
Critical	8 Oct 2013	CPAI-2013-2982	CVE-2013-3886	Microsoft Internet Explorer Memory Corruption (MS13-080; CVE-2013-3886)
Critical	8 Oct 2013	CPAI-2013-2981	CVE-2013-3128	Microsoft .NET Framework OpenType Font Parsing Remote Code Execution (MS13-082; CVE-2013-3128)
Critical	8 Oct 2013	CPAI-2013-2979	CVE-2013-3897	Microsoft Internet Explorer Memory Corruption (MS13-080; CVE-2013-3897)
High	8 Oct 2013	CPAI-2013-2978	CVE-2013-3891	Microsoft Word File Parsing Memory Corruption (MS13-086; CVE-2013-3891)
Critical	8 Oct 2013	CPAI-2013-2972	CVE-2013-3885	Microsoft Internet Explorer Memory Corruption (MS13-080; CVE-2013-3885)
Critical	8 Oct 2013	CPAI-2013-2971	CVE-2013-3875	Microsoft Internet Explorer Memory Corruption (MS13-080; CVE-2013-3875)
High	30 Sep 2013	CPAI-2013-2940		PineApp Mail-SeCure confpremenu.php Install License Command Injection
Low	30 Sep 2013	CPAI-2013-2938		TCP Off Path Sequence Number Inference
High	22 Sep 2013	CPAI-2013-2515	CVE-2012-1153	appRain CMF Arbitrary PHP File Upload (CVE-2012-1153)
Medium	22 Sep 2013	CPAI-2013-2501	CVE-2013-3664	Trimble Navigation SketchUp BMP File Buffer Overflow (CVE-2013-3664)
High	22 Sep 2013	CPAI-2013-2493	CVE-2013-0986	Apple QuickTime enof Atom Parsing Heap Buffer Overflow (CVE-2013-0986)
High	22 Sep 2013	CPAI-2013-1916	CVE-2012-1533	Sun Java Web Start Double Quote Injection (CVE-2012-1533)
Critical	22 Sep 2013	CPAI-2013-1898	CVE-2012-0911	Tiki Wiki PHP unserialize() Remote Code Execution (CVE-2012-0911)
Critical	13 Oct 2013	CPAI-2013-2965	CVE-2013-2325	HP Data Protector CRS Opcode 235 Stack Buffer Overflow (CVE-2013-2325)
Critical	13 Oct 2013	CPAI-2013-2963	CVE-2013-4635	PHP SdnToJewish Function Integer Overflow (CVE-2013-4635)
High	13 Oct 2013	CPAI-2013-2954		Apple IOS and OSX WebKit Engine Denial Of Service
High	13 Oct 2013	CPAI-2013-2953	CVE-2012-3748	Apple Safari Heap Buffer Overflow (CVE-2012-3748)
Medium	13 Oct 2013	CPAI-2013-2519	CVE-2011-4075	PHP phpLDAPadmin Remote Code Execution (CVE-2011-4075)
Medium	13 Oct 2013	CPAI-2013-2512	CVE-2013-4883	McAfee ePolicy Orchestrator Multiple Cross Site Scripting (CVE-2013-4883)
High	13 Oct 2013	CPAI-2013-2502	CVE-2013-1020	Apple QuickTime MJPEG Frame stsd Atom Heap Overflow (CVE-2013-1020)
Critical	13 Oct 2013	CPAI-2013-2497	CVE-2013-2328	HP Data Protector CRS Opcode 215 and 263 Stack Buffer Overflow (CVE-2013-2328)
Critical	13 Oct 2013	CPAI-2013-2491	CVE-2013-4123	Squid HTTP Host Header Port Handling Denial of Service (CVE-2013-4123)
High	8 Oct 2013	CPAI-2013-2918	CVE-2013-3860	Microsoft .NET Framework Entity Expansion Denial of Service (MS13-082; CVE-2013-3860)
High	8 Oct 2013	CPAI-2013-2911	CVE-2013-3861	Microsoft Internet Explorer Javascript Runtime Denial Of Service (MS13-082; CVE-2013-3861)
Critical	27 Oct 2013	CPAI-2013-3492	CVE-2013-5641	Digium Asterisk SIP Terminated Channel ACK with SDP Denial of Service (CVE-2013-5641)
High	27 Oct 2013	CPAI-2013-3490	CVE-2013-3520	VMware vCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload (CVE-2013-3520)
Critical	27 Oct 2013	CPAI-2013-3489		BlackHole Toolkit v2 EXE Payload Stage Code Execution
Critical	27 Oct 2013	CPAI-2013-3488		BlackHole Toolkit v2 Flash Player Payload Stage Code Execution
Critical	27 Oct 2013	CPAI-2013-3487		BlackHole Toolkit v2 Adobe Reader Payload Stage Code Execution
Critical	27 Oct 2013	CPAI-2013-3485		BlackHole Toolkit v2 Landing Page Stage Code Execution
Medium	27 Oct 2013	CPAI-2013-3484	CVE-2013-0733	Corel PaintShop Pro Insecure Library Loading (CVE-2013-0733)
High	20 Oct 2013	CPAI-2013-2986	CVE-2011-2505	PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)
High	20 Oct 2013	CPAI-2013-2985	CVE-2011-2506	PhpMyAdmin Sweky Remote Code Injection Exploit (CVE-2011-2506)
Critical	13 Oct 2013	CPAI-2013-1912	CVE-2013-2331	HP Data Protector CRS Opcode 1092 Stack Buffer Overflow (CVE-2013-2331)
High	27 Oct 2013	CPAI-2013-2977	CVE-2010-4228	Novell Netware FTP Server DELE Command Stack Buffer Overflow (CVE-2010-4228)
Critical	27 Oct 2013	CPAI-2013-2973	CVE-2013-4298	ImageMagick GIF Comment Processing Off-by-one Buffer Overflow (CVE-2013-4298)
Medium	27 Oct 2013	CPAI-2013-2968	CVE-2013-4811	HP ProCurve Manager SNAC UpdateDomainControllerServlet Code Execution (CVE-2013-4811)
Medium	27 Oct 2013	CPAI-2013-2966	CVE-2013-2368	HP LoadRunner micWebAjax.dll ActiveX Control Stack Buffer Overflow (CVE-2013-2368)
Medium	27 Oct 2013	CPAI-2013-2964	CVE-2013-2577	XnView PCT File Processing Buffer Overflow (CVE-2013-2577)
High	27 Oct 2013	CPAI-2013-2962	CVE-2013-4152	SpringSource Spring Framework XML External Entity Information Disclosure (CVE-2013-4152)
High	27 Oct 2013	CPAI-2013-2961	CVE-2013-5642	Digium Asterisk SIP Invalid SDP Media Descriptions Denial of Service (CVE-2013-5642)
Critical	27 Oct 2013	CPAI-2013-2958	CVE-2013-2327	HP Data Protector CRS Opcode 264 Stack Buffer Overflow (CVE-2013-2327)
Critical	27 Oct 2013	CPAI-2013-2957		PineApp Mail-SeCure livelog.html Command Injection
High	27 Oct 2013	CPAI-2013-2951	CVE-2013-5093	Graphite Web Unsafe Module Handling Code Execution (CVE-2013-5093)
High	27 Oct 2013	CPAI-2013-2942	CVE-2005-1174	MIT Kerberos V5 KDC TCP Handling Denial of Service (CVE-2005-1174)
Medium	27 Oct 2013	CPAI-2013-2941		VLC Media Player ABC File Parts Field Parsing Heap Integer Overflow
High	27 Oct 2013	CPAI-2013-2933	CVE-2013-2461	Oracle Java SE XML Digital Signature Spoofing (CVE-2013-2461)
Critical	27 Oct 2013	CPAI-2013-2932	CVE-2013-2362	HP System Management Homepage iprange Stack Buffer Overflow (CVE-2013-2362)
Critical	4 Nov 2013	CPAI-2013-3518	CVE-2013-4822	HP Intelligent Management Center BIMS UploadServlet Arbitrary File Upload (CVE-2013-4822)
High	4 Nov 2013	CPAI-2013-3507	CVE-2013-0653	GE Intelligent Platforms Proficy SCADA Substitute.bcl Directory Traversal (CVE-2013-0653)