Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	17 Mar 2014	6 Apr 2014	CPAI-2014-1156	PostgreSQL	CVE-2014-0064	PostgreSQL Database geo_ops path_in Integer Overflow (CVE-2014-0064)
High	3 Apr 2014	6 Apr 2014	CPAI-2014-1314			Multiple PHP Servers R57shell Backdoor Command Execution
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1327			Sqlninja Automated SQL Injection tool
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1328			BSQL Automated SQL Injection tool
Critical	6 Apr 2014	6 Apr 2014	CPAI-2014-1174			Pangolin Automated SQL Injection tool
High	3 Apr 2014	3 Apr 2014	CPAI-2014-1192	CVE-2014-0818		Autodesk AutoCAD Insecure FAS Loading (CVE-2014-0818)
High	3 Apr 2014	3 Apr 2014	CPAI-2014-1164	CVE-2014-0002		Apache Camel XSLT Component XML External Entity (CVE-2014-0002)
High	16 Mar 2014	3 Apr 2014	CPAI-2014-1151	Apple	CVE-2014-1266	Apple Products SSLVerifySignedServerKeyExchange Security Feature Bypass (CVE-2014-1266)
High	30 Mar 2014	3 Apr 2014	CPAI-2014-1192	Autodesk	CVE-2014-0818	Autodesk AutoCAD Insecure FAS Loading (CVE-2014-0818)
High	2 Apr 2014	3 Apr 2014	CPAI-2014-1317	Apache	CVE-2014-0098	Apache HTTP Server mod_log_config Denial of Service (CVE-2014-0098)
Low	8 Apr 2014	1 Apr 2014	CPAI-2014-1306			Microsoft Internet Explorer 8
Low	8 Apr 2014	1 Apr 2014	CPAI-2014-1305			Microsoft Internet Explorer 7
Medium	8 Apr 2014	1 Apr 2014	CPAI-2014-1176			JBroFuzz Security Scanner
N/A	31 Mar 2014	1 Apr 2014	CPAI-2014-1306			Microsoft Internet Explorer 8
Medium	1 Apr 2014	1 Apr 2014	CPAI-2014-1176			JBroFuzz Security Scanner
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1312	CVE-2012-2027		Adobe Photoshop Tiff File RLE Compression Buffer Overflow - Ver2 (CVE-2012-2027)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1311	CVE-2010-1297		Adobe Multiple Products authplay.dll PDF File Code Execution - Ver2 (CVE-2010-1297)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1310	CVE-2013-0634		Adobe Flash Player ActionScript Code Heap Buffer Overflow - Ver2 (CVE-2013-0634)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1309	CVE-2013-0640		Adobe Reader XFA Remote Code Execution - Ver2 (CVE-2013-0640)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1304	CVE-2011-1261		Internet Explorer Selection Object Memory Corruption - Ver2 (CVE-2011-1261)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1303	CVE-2011-1440		Google Chrome and Apple Safari Apple Webkit Ruby Memory Corruption - Ver2 (CVE-2011-1440)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1302	CVE-2012-1443		Multiple Antivirus Products RAR Parser MZ Character Sequence Security Bypass - Ver2 (CVE-2012-1443)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1301	CVE-2005-2124		GDI WMF File Rendering Code Execution - Ver2 (CVE-2005-2124)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1300	CVE-2008-2001		Apple Safari out-of-bounds access Denial of Service - Ver2 (CVE-2008-2001)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1299	CVE-2006-1184		Microsoft Windows MSDTC Denial of Service - Ver2 (CVE-2006-1184)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1298	CVE-2013-3870		Microsoft Outlook MIME Email Message Parsing Remote Code Execution - Ver2 (CVE-2013-3870)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1297	CVE-2008-1434		Microsoft Word Cascading Style Sheet Processing Code Execution - Ver2 (CVE-2008-1434)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1296	CVE-2011-4166		HP Managed printing Administration jobAcct Remote Command Execution - Ver2 (CVE-2011-4166)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1295	CVE-2007-5348		Microsoft Windows GDI VML Gradient Buffer Overflow - Ver2 (CVE-2007-5348)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1294	CVE-2005-1790		Internet Explorer JavaScript window Memory Corruption - Ver2 (CVE-2005-1790)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1293	CVE-2007-5659		Adobe Multiple Products PDF JavaScript Method Buffer Overflow - Ver2 (CVE-2007-5659)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1292	CVE-2010-1879		Microsoft DirectShow Crafted MJPEG Stream Handling Code Execution - Ver2 (CVE-2010-1879)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1291	CVE-2013-2460		Oracle Java sun.tracing.ProviderSkeleton Sandbox Bypass Code Execution - Ver2 (CVE-2013-2460)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1290	CVE-2013-1359		Multiple SonicWALL Products Authentication Bypass - Ver2 (CVE-2013-1359)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1289	CVE-2012-0155		Internet Explorer VML Remote Code Execution - Ver2 (CVE-2012-0155)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1288	CVE-2011-4189		Novell Groupwise 8.02 Addressbook Memory Corruption - Ver2 (CVE-2011-4189)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1287	CVE-2005-0063		Microsoft Windows Shell MSHTA OLE Files Code Execution - Ver2 (CVE-2005-0063)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1286	CVE-2012-4786		Microsoft Windows TrueType Font Parsing Remote Code Execution - Ver2 (CVE-2012-4786)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1285	CVE-2009-1537		Microsoft DirectShow Large ImageDescription Name Size Code Execution - Ver2 (CVE-2009-1537)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1284	CVE-2009-0855		IBM WebSphere Application Server Cross-Site Scripting - Ver2 (CVE-2009-0855)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1283	CVE-2008-1999		Apple Safari for Windows URL Address Spoofing - Ver2 (CVE-2008-1999)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1282	CVE-2002-1412		Bharat Mediratta Gallery captionator.php GALLERY_BASEDIR Parameter PHP Code Execution - Ver2 (CVE-2002-1412)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1281	CVE-2013-2429		Oracle Java JPEGImageWriter Memory Corruption - Ver2 (CVE-2013-2429)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1280	CVE-2009-0081		Microsoft Windows Kernel Input Validation Remote Code Execution - Ver2 (CVE-2009-0081)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1279	CVE-2006-4075		Wim Fleischhauer Docpile URL in INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4075)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1278	CVE-2011-4156		HP Network Node Manager Cross-Site Scripting - Ver2 (CVE-2011-4156)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1276	CVE-2013-5962		WordPress Complete Gallery Manager Plugin Arbitrary Code Execution - Ver2 (CVE-2013-5962)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1275	CVE-2008-4837		Microsoft Word Crafted Sprm Structure Stack Memory Corruption - Ver2 (CVE-2008-4837)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1274	CVE-2010-0480		Microsoft MPEG Layer-3 Audio Decoder Stack Buffer Overflow - Ver2 (CVE-2010-0480)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1273	CVE-2011-5171		Cyberlink Power2Go p2g Project Buffer Overflow - Ver2 (CVE-2011-5171)