Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1472		CVE-2011-0655	Microsoft PowerPoint Techno-color Time Bandit Code Execution (MS11-022) - Ver2 (CVE-2011-0655)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1435		CVE-2007-1403	Macromedia Shockwave swdir.dll ActiveX Control Remote Stack Buffer Overflow - Ver2 (CVE-2007-1403)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1395		CVE-2011-1823	Google Android Vold Volume Manager Integer Wrap Root Exploit Privilege Escalation - Ver2 (CVE-2011-1823)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1420		CVE-2010-3230	Microsoft Office Excel Record Parsing Integer Overflow - Ver2 (CVE-2010-3230)
Critical	16 Apr 2014	16 Apr 2014	CPAI-2014-1382		CVE-2008-4258	Internet Explorer ActiveX Navigate Handling Code Execution (MS08-073) - Ver2 (CVE-2008-4258)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1417		CVE-2011-3411	Microsoft Publisher Invalid Pointer Code Execution (MS11-091) - Ver2 (CVE-2011-3411)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1386		CVE-2000-0884	Microsoft IIS EXE W32 Storm Worm Command Execution - Ver2 (CVE-2000-0884)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1443		CVE-2010-2569	Microsoft Office Publisher pubconv.dll Size Value Heap Corruption (MS10-103) - Ver2 (CVE-2010-2569)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1454		CVE-2007-5217	Altnet Download Manager ActiveX Buffer Overflow - Ver2 (CVE-2007-5217)
Critical	16 Apr 2014	16 Apr 2014	CPAI-2014-1368		CVE-2003-0201	Samba Trans2 Open2 Buffer Overflow - Ver2 (CVE-2003-0201)
Medium	16 Apr 2014	16 Apr 2014	CPAI-2014-1494		CVE-2011-4858	Apache Tomcat Parameter Hash Collision Denial of Service - Ver2 (CVE-2011-4858)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1415		CVE-2011-3410	Microsoft Publisher Out-of-bounds Array Index Code Execution (MS11-091) - Ver2 (CVE-2011-3410)
Critical	16 Apr 2014	16 Apr 2014	CPAI-2014-1384		CVE-2012-0158	Microsoft Windows MSCOMCTL.OCX ActiveX Control Remote Code Execution - Ver2 (CVE-2012-0158)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1393		CVE-2008-3558	Cisco WebEx UCF atucfobj.dll ActiveX NewObject Buffer Overflow - Ver2 (CVE-2008-3558)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1442		CVE-2007-1090	Windows Explorer WMF Unspecified Denial of Service - Ver2 (CVE-2007-1090)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1439		CVE-2010-2573	Microsoft PowerPoint Integer Underflow Heap Corruption (MS10-088) - Ver2 (CVE-2010-2573)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1418		CVE-2010-0257	Microsoft Excel EntExU2 Record Memory Corruption (MS10-017) - Ver2 (CVE-2010-0257)
High	16 Apr 2014	16 Apr 2014	CPAI-2014-1392		CVE-2011-0028	Microsoft WordPad Converter sprm Record Parsing Code Execution (MS11-033) - Ver2 (CVE-2011-0028)
High	13 Apr 2014	13 Apr 2014	CPAI-2014-1315	CVE-2014-2286		Digium Asterisk Cookie Stack Overflow (CVE-2014-2286)
High	6 Apr 2014	13 Apr 2014	CPAI-2014-1329		CVE-2014-0819	Autodesk AutoCAD Insecure Library Loading (CVE-2014-0819)
High	10 Apr 2014	10 Apr 2014	CPAI-2014-1345	CVE-2006-0580 CVE-2006-4510		IBM Lotus Domino LDAP Server Memory Exception (CVE-2006-0580; CVE-2006-4510)
Critical	10 Apr 2014	10 Apr 2014	CPAI-2014-1343	CVE-2008-2595		Oracle Internet Directory Pre-Authentication LDAP Denial of Service (CVE-2008-2595)
Critical	10 Apr 2014	10 Apr 2014	CPAI-2014-1340	CVE-2014-0507		Adobe Flash Player Use After Free Code Execution (APSB14-09; CVE-2014-0507)
Critical	10 Apr 2014	10 Apr 2014	CPAI-2014-0091	CVE-2010-1939		Apple Safari Parent.Close Use After Free - Ver2 (CVE-2010-1939)
Critical	7 Jan 2014	10 Apr 2014	CPAI-2014-0091		CVE-2010-1939	Apple Safari parent.close Code Execution - Ver2 (CVE-2010-1939)
High	10 Apr 2014	10 Apr 2014	CPAI-2014-1345		CVE-2006-0580 CVE-2006-4510	IBM Lotus Domino LDAP Server Memory Exception (CVE-2006-0580; CVE-2006-4510)
Medium	10 Apr 2014	10 Apr 2014	CPAI-2014-1344	VideoLAN SA1201	CVE-2012-1775	VideoLAN VLC Media Player MMS Plugin Stack Buffer Overflow - ver 2 (CVE-2012-1775)
High	9 Apr 2014	9 Apr 2014	CPAI-2014-1339	CVE-2007-5400		RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ver 2 (CVE-2007-5400)
Critical	9 Apr 2014	9 Apr 2014	CPAI-2014-1338	CVE-2014-0506		Adobe Flash Player Use After Free Code Execution (APSB14-09; CVE-2014-0506)
Critical	9 Apr 2014	9 Apr 2014	CPAI-2014-1336	CVE-2014-0160 CVE-2014-0346		OpenSSL TLS DTLS Heartbeat Information Disclosure (CVE-2014-0160; CVE-2014-0346)
Critical	9 Apr 2014	9 Apr 2014	CPAI-2014-0031	CVE-2009-1979		Oracle Database Server AUTH_SESSKEY Stack Buffer Overflow - Ver2 (CVE-2009-1979)
Critical	7 Jan 2014	9 Apr 2014	CPAI-2014-0031		CVE-2009-1979	Oracle Database Server Network Authentication AUTH_SESSKEY Buffer Overflow - Ver2 (CVE-2009-1979)
High	2 Apr 2014	9 Apr 2014	CPAI-2014-1316	EMC ESA-2014-018	CVE-2014-2276	EMC CMCNE FileUploadController Information Disclosure (CVE-2014-2276)
Critical	8 Apr 2014	9 Apr 2014	CPAI-2014-1333			Google Android addJavascriptInterface Remote Code Execution
Critical	9 Apr 2014	9 Apr 2014	CPAI-2014-1338	Adobe APSB14-09	CVE-2014-0506	Adobe Flash Player Use After Free Code Execution (APSB14-09: CVE-2014-0506)
Critical	8 Apr 2014	8 Apr 2014	CPAI-2014-1185	CVE-2014-1751		Microsoft Internet Explorer Memory Corruption (MS14-018; CVE-2014-1751)
Critical	8 Apr 2014	8 Apr 2014	CPAI-2014-1184	CVE-2014-1752		Microsoft Internet Explorer Memory Corruption (MS14-018; CVE-2014-1752)
Critical	8 Apr 2014	8 Apr 2014	CPAI-2014-1335			Illegal TCP Options
Critical	7 Apr 2014	7 Apr 2014	CPAI-2014-1330			BlackHole Toolkit URL Pattern Remote Code Execution
High	7 Apr 2014	7 Apr 2014	CPAI-2014-1329	CVE-2014-0819		Autodesk AutoCAD Insecure Library Loading (CVE-2014-0819)
High	7 Apr 2014	7 Apr 2014	CPAI-2014-1182			PHP JavaScript Website Redirection
High	8 Apr 2014	7 Apr 2014	CPAI-2014-1154	CVE-2014-0063		PostgreSQL Database Datetime Buffer Overflow (CVE-2014-0063)
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1328			BSQL Automated SQL Injection tool
High	8 Apr 2014	6 Apr 2014	CPAI-2014-1314			Multiple PHP Servers R57shell Backdoor Command Execution
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1327			Sqlninja Automated SQL Injection tool
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1326			Sqlmap Automated SQL Injection tool
High	6 Apr 2014	6 Apr 2014	CPAI-2014-1323	CVE-2014-2323		Lighttpd Host Header mod_mysql_vhost SQL Injection (CVE-2014-2323)
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1175			Havij Automated SQL Injection tool
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1174			Pangolin Automated SQL Injection tool
High	3 Mar 2014	6 Apr 2014	CPAI-2014-1069		CVE-2012-1853	Microsoft Remote Administration Protocol Heap and Stack Overflow (MS12-054) - Ver2 (CVE-2012-1853)