Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	13 May 2014	4 May 2014	CPAI-2014-1512			Conficker Shellcode Remote Code Execution
High	18 May 2014	4 May 2014	CPAI-2014-1519	CVE-2014-2210		CA Erwin Web Portal Multiple Directory Traversal Vulnerabilities (CVE-2014-2210)
Critical	18 May 2014	4 May 2014	CPAI-2014-1513			JavaScript Malicious Obfuscation Techniques - Ver2
Critical	13 May 2014	1 May 2014	CPAI-2014-1504	CVE-2005-0045		Microsoft Windows SMB Response Handling Buffer Overflow - ver 2 (CVE-2005-0045)
High	18 May 2014	1 May 2014	CPAI-2014-1135	CVE-2013-6448		Red Hat JBoss Seam InterfaceGenerator Information Disclosure (CVE-2013-6448)
Critical	7 Jan 2014	1 May 2014	CPAI-2014-0395		CVE-2003-0395	Ultimate PHP Board User-Agent HTTP Header Code Execution - Ver2 (CVE-2003-0395)
Critical	30 Apr 2014	1 May 2014	CPAI-2014-1504		CVE-2005-0045	Microsoft Windows SMB Response Handling Buffer Overflow - ver 2 (CVE-2005-0045)
High	1 May 2014	1 May 2014	CPAI-2014-1135	Red Hat	CVE-2013-6448	Red Hat JBoss Seam InterfaceGenerator Information Disclosure (CVE-2013-6448)
Critical	1 May 2014	1 May 2014	CPAI-2014-1509			g01pack Exploit Kit Remote Code Execution
Critical	30 Apr 2014	30 Apr 2014	CPAI-2014-1493			TLS Invalid Cipher Suites Denial of Service
Critical	30 Apr 2014	30 Apr 2014	CPAI-2014-1334	CVE-2012-3993 CVE-2013-1710		Mozilla Firefox generateCRMFRequest Remote Code Execution (CVE-2012-3993; CVE-2013-1710)
Medium	18 May 2014	30 Apr 2014	CPAI-2014-1483	CVE-2014-0770		Advantech WebAccess SCADA webvact.ocx UserName Buffer Overflow (CVE-2014-0770)
Critical	30 Apr 2014	29 Apr 2014	CPAI-2014-1492	CVE-2014-0515		Adobe Flash Player Buffer Overflow Arbitrary Code Execution (CVE-2014-0515)
High	18 May 2014	29 Apr 2014	CPAI-2014-1479	CVE-2014-0315		Microsoft Windows File Handling Component Remote Code Execution (MS14-019; CVE-2014-0315)
High	24 Apr 2014	29 Apr 2014	CPAI-2014-1479	Microsoft MS14-019	CVE-2014-0315	Microsoft Windows File Handling Component Remote Code Execution (MS14-019; CVE-2014-0315)
Medium	18 May 2014	28 Apr 2014	CPAI-2014-1489	CVE-2013-6874		Vortex Media Group Light Alloy M3U File Handling Buffer Overflow (CVE-2013-6874)
High	18 May 2014	28 Apr 2014	CPAI-2014-1486	CVE-2013-3706		Novell ZENworks Configuration Management PreBoot Directory Traversal (CVE-2013-3706)
High	18 May 2014	28 Apr 2014	CPAI-2014-1349			RARLAB WinRAR Zip Format Filename Spoofing
High	13 Apr 2014	28 Apr 2014	CPAI-2014-1349			RARLAB WinRAR Zip Format Filename Spoofing
High	27 Apr 2014	28 Apr 2014	CPAI-2014-1486	Novell	CVE-2013-3706	Novell ZENworks Configuration Management PreBoot Directory Traversal (CVE-2013-3706)
Medium	28 Apr 2014	28 Apr 2014	CPAI-2014-1489		CVE-2013-6874	Vortex Media Group Light Alloy M3U File Handling Buffer Overflow (CVE-2013-6874)
Critical	27 Apr 2014	27 Apr 2014	CPAI-2014-1481	CVE-2014-1776		Microsoft Internet Explorer Remote Code Execution (CVE-2014-1776)
Critical	18 May 2014	27 Apr 2014	CPAI-2014-1169	CVE-2014-1943		PHP Fileinfo Call Stack Exhaustion Denial of Service (CVE-2014-1943)
Critical	23 Mar 2014	27 Apr 2014	CPAI-2014-1169	PHP #66731	CVE-2014-1943	PHP Fileinfo Call Stack Exhaustion Denial of Service (CVE-2014-1943)
N/A	23 Apr 2014	27 Apr 2014	CPAI-2014-1194			Microsoft Windows XP Operating System
Low	23 Apr 2014	23 Apr 2014	CPAI-2014-1325			Microsoft Windows 3.11 Operating System
Low	23 Apr 2014	23 Apr 2014	CPAI-2014-1324			Microsoft Windows ME Operating System
Low	23 Apr 2014	23 Apr 2014	CPAI-2014-1322			Microsoft Windows 2000 Operating System
Low	23 Apr 2014	23 Apr 2014	CPAI-2014-1322			Microsoft Windows NT 4.0 Operating System
N/A	23 Apr 2014	23 Apr 2014	CPAI-2014-1325			Microsoft Windows 3.11 Operating System
N/A	23 Apr 2014	23 Apr 2014	CPAI-2014-1324			Microsoft Windows ME Operating System
N/A	23 Apr 2014	23 Apr 2014	CPAI-2014-1321			Microsoft Windows 95 Operating System
N/A	23 Apr 2014	23 Apr 2014	CPAI-2014-1332			Microsoft Windows 2000 Operating System
N/A	23 Apr 2014	23 Apr 2014	CPAI-2014-1322			Microsoft Windows NT 4.0 Operating System
N/A	23 Apr 2014	23 Apr 2014	CPAI-2014-1320			Microsoft Windows 98 Operating System
High	18 May 2014	22 Apr 2014	CPAI-2014-1350	CVE-2014-1644		Symantec LiveUpdate Administrator Security Bypass (CVE-2014-1644)
High	13 Apr 2014	22 Apr 2014	CPAI-2014-1350	Symantec	CVE-2014-1644	Symantec LiveUpdate Administrator Security Bypass (CVE-2014-1644)
Critical	17 Apr 2014	17 Apr 2014	CPAI-2014-1337	CVE-2014-0509		Adobe Flash Player Cross-Site Scripting (APSB14-09; CVE-2014-0509)
High	18 May 2014	17 Apr 2014	CPAI-2014-1477	CVE-2014-1903		FreePBX config php Code Execution (CVE-2014-1903)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1475	CVE-2008-5499		Adobe Flash Player for Linux ActionScript ASnative Command Execution - Ver2 (CVE-2008-5499)
Critical	16 Apr 2014	16 Apr 2014	CPAI-2014-1474	CVE-2012-1847		Microsoft Excel SERIES Record Parsing Code Execution - Ver2 (CVE-2012-1847)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1473	CVE-2006-3677		Mozilla Browsers JavaScript Navigator Object Memory Corruption - Ver2 (CVE-2006-3677)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1472	CVE-2011-0655		Microsoft PowerPoint Techno-color Time Bandit Code Execution - Ver2 (CVE-2011-0655)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1471	CVE-2010-3237		Microsoft Excel Merge Cell Record Pointer Code Execution - Ver2 (CVE-2010-3237)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1470	CVE-2007-3091		Internet Explorer Cross Domain Document Switching Information Disclosure - Ver2 (CVE-2007-3091)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1469	CVE-2003-0213		PoPToP PPTP Negative Read Overflow Buffer Overflow - Ver2 (CVE-2003-0213)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1468	CVE-2010-0821		Microsoft Excel SxView Record Parsing Memory Corruption - Ver2 (CVE-2010-0821)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1466	CVE-2006-3773		SMF Forum smf.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3773)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1465	CVE-2009-1831		Winamp Maki File Buffer Overflow - Ver2 (CVE-2009-1831)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1463	CVE-2009-3214		ProShow Gold file based Buffer Overflow - Ver2 (CVE-2009-3214)