Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	21 Jul 2013	17 Dec 2017	CPAI-2013-2457		CVE-2013-2116	GnuTLS TLS Record Decoding Out-of-bounds Memory Access (CVE-2013-2116)
High	8 May 2013	19 Nov 2017	CPAI-2013-1805		CVE-2009-2404	Mozilla Network Security Services Regexp Heap Overflow - Improved Performance (CVE-2009-2404)
Critical	12 Feb 2013	5 Nov 2017	CPAI-2013-1683		CVE-2013-0025	Microsoft Internet Explorer SLayoutRun Use After Free (MS13-009) - High Confidence (CVE-2013-0025)
Critical	24 Nov 2013	30 Oct 2017	CPAI-2013-3567		CVE-2013-3351	Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3351) - ver 2
Critical	6 Mar 2013	17 Oct 2017	CPAI-2013-030		CVE-2012-0432	Novell eDirectory NCP Stack Buffer Overflow (CVE-2012-0432)
Critical	19 Feb 2013	27 Sep 2017	CPAI-2013-3523		CVE-2013-0632	Adobe ColdFusion Authentication Bypass (CVE-2013-0632)
High	2 Jun 2013	18 Jul 2017	CPAI-2013-2504		CVE-2013-0229	MiniUPnP MiniUPnPd ProcessSSDPRequest Denial of Service (CVE-2013-0229)
Critical	9 Jul 2013	28 Jun 2017	CPAI-2013-2470			Multiple Vendors IPMI 2.0 Authentication Bypass via Cipher 0
Critical	12 Nov 2013	22 Jun 2017	CPAI-2013-3539		CVE-2013-3940	Microsoft Graphics Device Interface Integer Overflow (MS13-089) - ver 2 (CVE-2013-3940)
Medium	2 Jun 2013	21 Mar 2017	CPAI-2013-1851		CVE-2013-1416 CVE-2015-2697	MIT Kerberos 5 KDC Denial of Service (CVE-2013-1416; CVE-2015-2697)
Medium	24 Apr 2013	13 Mar 2017	CPAI-2013-1680		CVE-2013-1289	Microsoft HTML Sanitization Cross Site Scripting (MS13-035) - High Confidence (CVE-2013-1289)
Critical	27 Oct 2013	1 Mar 2017	CPAI-2013-3486		CVE-2012-0507 CVE-2012-1723 CVE-2013-0422 CVE-2013-0431 CVE-2013-1493	BlackHole Toolkit v2 JAVA Payload Stage Code Execution (CVE-2012-0507; CVE-2012-1723; CVE-2013-0422; CVE-2013-0431; CVE-2013-1493)
Critical	14 May 2013	11 Jan 2017	CPAI-2013-1695		CVE-2013-2551	Internet Explorer VML Objects Use After Free (MS13-037; CVE-2013-2551)
High	8 Oct 2013	9 Jan 2017	CPAI-2013-2918	Microsoft MS13-082	CVE-2013-3860	Microsoft .NET Framework Entity Expansion Denial of Service (MS13-082; CVE-2013-3860)
Critical	9 Sep 2013	29 Dec 2016	CPAI-2013-2924		CVE-2013-2473	Oracle Java java.awt.image.ByteComponentRaster Memory Corruption (CVE-2013-2473)
Critical	24 Nov 2013	29 Dec 2016	CPAI-2013-3587		CVE-2013-3356	Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3356)
Critical	12 Mar 2013	27 Dec 2016	CPAI-2013-1331	Microsoft MS13-021	CVE-2013-0088	Internet Explorer saveHistory Use After Free Code Execution (MS13-021; CVE-2013-0088)
Critical	3 Jun 2013	27 Dec 2016	CPAI-2013-1852		CVE-2012-5945 CVE-2014-0895	IBM SPSS SamplePower Vsflex8l ActiveX Control Buffer Overflow (CVE-2012-5945; CVE-2014-0895)
Medium	21 Jul 2013	27 Dec 2016	CPAI-2013-2496		CVE-2013-2977	IBM Notes PNG Image Parsing Integer Overflow (CVE-2013-2977)
Critical	27 Feb 2013	22 Dec 2016	CPAI-2013-1322	Microsoft MS13-004	CVE-2013-0002	Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002)
Medium	27 Feb 2013	22 Dec 2016	CPAI-2013-1320	Microsoft MS13-004	CVE-2013-0001	Microsoft .NET Framework WinForms Information Disclosure (CVE-2013-0001)
Critical	24 Feb 2013	21 Dec 2016	CPAI-2013-1313	Microsoft MS13-002	CVE-2013-0006	Microsoft XML Core Services Integer Truncation Memory Corruption (MS13-002; CVE-2013-0006)
Critical	9 Jun 2013	20 Dec 2016	CPAI-2013-1876		CVE-2013-2420	Oracle Java sun.awt.image.ImageRepresentation.setPixels Integer Overflow (CVE-2013-2420)
High	23 Jun 2013	20 Dec 2016	CPAI-2010-131		CVE-2010-0046	Apple Safari CSS format Argument Handling Memory Corruption - High Confidence (CVE-2010-0046)
Critical	22 Sep 2013	15 Dec 2016	CPAI-2013-2947		CVE-2013-4798	HP LoadRunner WriteFileString Directory Traversal - ver 2 (CVE-2013-4798)
Critical	27 Feb 2013	14 Dec 2016	CPAI-2013-1326	Oracle	CVE-2013-1489	Oracle Java Security Slider Feature Bypass (CVE-2013-1489)
Critical	27 Oct 2013	30 Nov 2016	CPAI-2013-3485			BlackHole Toolkit v2 Landing Page Stage Code Execution
High	4 Nov 2013	7 Nov 2016	CPAI-2013-3497		CVE-2013-3568	Belkin Linksys WRT110 Remote Command Execution (CVE-2013-3568)
High	1 Jul 2013	25 Oct 2016	CPAI-2013-1910		CVE-2012-5357	Ektron 8.02 XSLT Transform Remote Code Execution (CVE-2012-5357)
Medium	28 May 2013	20 Oct 2016	CPAI-2013-1686		CVE-2013-1892	MongoDB nativeHelper.apply Remote Code Execution (CVE-2013-1892)
High	5 Jun 2013	20 Oct 2016	CPAI-2013-1862		CVE-2013-0136	Mutiny FrontEnd Arbitrary File Upload (CVE-2013-0136)
High	17 Jan 2013	14 Oct 2016	CPAI-2013-022		CVE-2013-0624	Adobe Acrobat Reader Hybrid File Cross-Site Scripting (APSB13-02; CVE-2013-0624)
High	10 Nov 2013	5 Oct 2016	CPAI-2013-3543		CVE-2012-3544	Apache Tomcat Chunked Transfer Denial of Service - Ver 2 (CVE-2012-3544)
Critical	11 Jun 2013	25 Sep 2016	CPAI-2013-1884		CVE-2012-5692	Invision IP.Board unserialize() PHP Remote Code Execution (CVE-2012-5692)
Critical	13 Jan 2013	17 Aug 2016	CPAI-2013-007		CVE-2013-0422	Oracle Java JmxMBeanServer Package Sandbox Breach (CVE-2013-0422)
High	1 Sep 2013	17 Aug 2016	CPAI-2013-2912		CVE-2013-3868	Microsoft LDAP Remote Anonymous Denial of Service (MS13-079; CVE-2013-3868)
High	21 Mar 2013	10 Aug 2016	CPAI-2013-1632		CVE-2012-3569	VMware OVF Tool Format String (CVE-2012-3569)
Critical	6 Feb 2013	21 Jul 2016	CPAI-2016-0580	Adobe APSB11-03	CVE-2011-0606	Adobe Reader and Acrobat rt3d.dll Buffer Overflow (APSB11-03; CVE-2011-0606)
Critical	3 Mar 2013	26 Jun 2016	CPAI-2013-1296		CVE-2013-0638	Adobe Flash Player Malformed FLV File Flash Memory Corruption (APSB13-05; CVE-2013-0638)
High	12 Mar 2013	26 Jun 2016	CPAI-2013-1338		CVE-2012-0013	Microsoft Windows Assembly Execution (MS12-005) - High Confidence (CVE-2012-0013)
Medium	18 Mar 2013	26 May 2016	CPAI-2013-1625		CVE-2012-3526	Apache HTTP Server mod_rpaf x-forwarded-for Denial of Service - Improved Confidence (CVE-2012-3526)
Critical	30 Jul 2013	3 Apr 2016	CPAI-2013-2511		CVE-2013-4113	PHP xml_parse_into_struct Heap Memory Corruption (CVE-2013-4113)
Medium	6 Feb 2013	10 Mar 2016	CPAI-2013-089			Advantech WebAccess HMI and SCADA Software Cross-Site Scripting
High	18 Jul 2013	3 Mar 2016	CPAI-2013-2493		CVE-2013-0986	Apple QuickTime enof Atom Parsing Heap Buffer Overflow (CVE-2013-0986)
High	22 Oct 2013	24 Feb 2016	CPAI-2013-3500		CVE-2013-3027	IBM iNotes ActiveX Control Integer Overflow (CVE-2013-3027)
High	7 Jan 2013	23 Feb 2016	CPAI-2012-1313		CVE-2012-3754	Apple QuickTime ActiveX Control Clear Method Use-After-Free (CVE-2012-3754)
High	27 Oct 2013	23 Feb 2016	CPAI-2013-3483			SolarWinds Orion Pepco32c ActiveX Control Buffer Overflow
Medium	3 Dec 2013	23 Feb 2016	CPAI-2013-3647		CVE-2013-5022	ABB Test Signal Viewer CWGraph3D ActiveX Arbitrary File Creation (CVE-2013-5022)
Critical	7 Jan 2013	18 Feb 2016	CPAI-2012-1310		CVE-2012-0284	Cisco Linksys PlayerPT ActiveX Control SetSource sURL Argument Buffer Overflow (CVE-2012-0284)
High	7 May 2013	18 Feb 2016	CPAI-2013-1801		CVE-2013-0108	Honeywell Multiple Products HscRemoteDeploy.dll ActiveX Control Code Execution (CVE-2013-0108)