Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Description
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1280	CVE-2009-0081	Microsoft Windows Kernel Input Validation Remote Code Execution - Ver2 (CVE-2009-0081)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1279	CVE-2006-4075	Wim Fleischhauer Docpile URL in INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4075)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1278	CVE-2011-4156	HP Network Node Manager Cross-Site Scripting - Ver2 (CVE-2011-4156)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1276	CVE-2013-5962	WordPress Complete Gallery Manager Plugin Arbitrary Code Execution - Ver2 (CVE-2013-5962)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1275	CVE-2008-4837	Microsoft Word Crafted Sprm Structure Stack Memory Corruption - Ver2 (CVE-2008-4837)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1274	CVE-2010-0480	Microsoft MPEG Layer-3 Audio Decoder Stack Buffer Overflow - Ver2 (CVE-2010-0480)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1273	CVE-2011-5171	Cyberlink Power2Go p2g Project Buffer Overflow - Ver2 (CVE-2011-5171)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1272	CVE-2013-6128	KingView ActiveX Control Directory Traversal - Ver2 (CVE-2013-6128)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1271	CVE-2009-0007	Apple QuickTime STSD JPEG Atom Heap Corruption - Ver2 (CVE-2009-0007)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1270	CVE-2010-0028	Microsoft Paint JPEG Image Parsing Integer Overflow - Ver2 (CVE-2010-0028)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1269	CVE-2006-4076	Wim Fleischhauer Docpile INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4076)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1268	CVE-2006-6134	Microsoft Windows Media Player ASX Parsing Buffer Overflow - Ver2 (CVE-2006-6134)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1267	CVE-2007-4607	EasyMail Object EMSMTP.DLL ActiveX Control Buffer Overflow - Ver2 (CVE-2007-4607)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1266	CVE-2010-1226	Apple Iphone OS Springboard Application Malformed Character Denial of Service - Ver2 (CVE-2010-1226)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1265	CVE-2008-4031	Microsoft Word RTF Stylesheet Control Word Memory Corruption - Ver2 (CVE-2008-4031)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1264	CVE-2007-4902	Ultra Crypto Component Insecure Method Directory traversal- Ver2 (CVE-2007-4902)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1263	CVE-2010-2862	Adobe Reader cooltype.dll Remote Code Execution - Ver2 (CVE-2010-2862)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1262	CVE-2013-4835	HP SiteScope issueSiebelCmd SOAP Request Code Execution - Ver2 (CVE-2013-4835)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1261	CVE-2010-3200	Microsoft Word MSO Null Pointer Dereference Denial of Service - Ver2 (CVE-2010-3200)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1260	CVE-2011-1988	Microsoft Excel Incorrect BIFF2 Record Parsing Code Execution - Ver2 (CVE-2011-1988)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1259	CVE-2005-3679	ActiveCampaign 1-2-All Broadcast Email sername Parameter SQL Injection - Ver2 (CVE-2005-3679)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1258	CVE-2013-2567	Zavio IP Camera Firmware 1.6.03 Authentication Bypass - Ver2 (CVE-2013-2567)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1257	CVE-2006-1730	Mozilla Firefox CSS letter-spacing Heap Overflow - Ver2 (CVE-2006-1730)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1256	CVE-2006-0136	Chimera Web Portal System modules.php comment_poster Cross-Site Scripting - Ver2 (CVE-2006-0136)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1255	CVE-2010-0018	Microsoft Windows Embedded OpenType Font Engine LZCOMP Integer Overflow - Ver2 (CVE-2010-0018)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1254	CVE-2005-0771	Veritas Backup Exec Server Remote Registry Access Code Execution- Ver2 (CVE-2005-0771)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1253	CVE-2012-0774	Adobe Reader and Acrobat TTF MINDEX Code Execution - Ver2 (CVE-2012-0774)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1252	CVE-2006-1610	Squery libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1610)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1251	CVE-2002-0649	MSSQL 2000MSDE Resolution Buffer Overflow - Ver2 (CVE-2002-0649)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1250	CVE-2010-1248	Microsoft Excel HFPicture Record Stack Overflow - Ver2 (CVE-2010-1248)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1249	CVE-2008-4025	Microsoft Word RTF Control Word Handling Integer Overflow - Ver2 (CVE-2008-4025)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1248	CVE-2013-5716	GomPlayer wav Buffer Overflow - Ver2 (CVE-2013-5716)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1247	CVE-2010-0250	Microsoft DirectShow AVI Parser Heap Overflow - Ver2 (CVE-2010-0250)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1246	CVE-2012-6315	Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1245	CVE-2007-0515	Microsoft Word Section Table Array Buffer Overflow - Ver2 (CVE-2007-0515)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1244	CVE-2010-4229	Novell ZENworks Asset Management File Upload Directory Traversal - Ver2 (CVE-2010-4229)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1243	CVE-2013-2430	Oracle Java and JavaFX JPEGImageReader Memory Corruption - Ver2 (CVE-2013-2430)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1242	CVE-2009-2500	Microsoft GDI WMF Integer Overflow - Ver2 (CVE-2009-2500)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1241	CVE-1999-0660	Microsoft Windows Trojan Client Remote Code Execution - Ver2 (CVE-1999-0660)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1240	CVE-2009-3677	Microsoft Internet Authentication Service MS-CHAP Security Bypass - Ver2 (CVE-2009-3677)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1239	CVE-2012-2528	Microsoft Office RTF File listid Use-After-Free - Ver2 (CVE-2012-2528)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1238	CVE-2009-0790	OpenSwan and StrongSwan DPD Packet Remote Denial of Service - Ver2 (CVE-2009-0790)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1237	CVE-2009-0927	Adobe Acrobat JavaScript getIcon Method Buffer Overflow - Ver2 (CVE-2009-0927)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1236	CVE-2013-0333	Ruby on Rails JSON Processor YAML Deserialization Code Execution - Ver2 (CVE-2013-0333)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1235	CVE-2012-1856	Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1234	CVE-2009-2501	GDI PNG Heap Overflow - Ver2 (CVE-2009-2501)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1233	CVE-2009-3038	Lotus Notes RIM connector for Blackberry Desktop Manager ActiveX Denial of Service - Ver2 (CVE-2009-3038)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1232	CVE-2006-0074	PHPenpals profile.php personalID Parameter SQL Injection - Ver2 (CVE-2006-0074)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1231	CVE-2011-3834	Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1230	CVE-2007-1239	Microsoft Excel NULL Pointer Denial of Service - Ver2 (CVE-2007-1239)