Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1208	CVE-2013-3663	Trimble Navigation SketchUp BMP File Code Execution - Ver2 (CVE-2013-3663)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1279	CVE-2006-4075	Wim Fleischhauer Docpile URL in INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4075)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1291	CVE-2013-2460	Java Applet ProviderSkeleton Class Insecure Invoke Method - Ver2 (CVE-2013-2460)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1215	CVE-2002-1750	CSGuestbook csGuestbook.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1750)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1288	CVE-2011-4189	Novell Groupwise 8.02 Addressbook Memory Corruption - Ver2 (CVE-2011-4189)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2011-331	CVE-2010-4229	Novell ZENworks Asset Management File Upload Directory Traversal - Ver2 (CVE-2010-4229)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1264	CVE-2007-4902	Ultra Crypto Component Insecure Method Directory traversal - Ver2 (CVE-2007-4902)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1225	CVE-2007-5020	Windows URI Handling Arbitrary Code Execution - Ver2 (CVE-2007-5020)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1261	CVE-2010-3200	Microsoft Word MSO Null Pointer Dereference Denial of Service - Ver2 (CVE-2010-3200)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1285	CVE-2009-1537	Microsoft DirectShow QuickTime Movie Parser Filter Code Execution - Ver2 (CVE-2009-1537)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1292	CVE-2010-1879	Microsoft DirectShow Crafted MJPEG Stream Handling Code Execution (MS10-033) - Ver2 (CVE-2010-1879)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1302	CVE-2012-1443	Multiple Antivirus Products RAR Parser MZ Character Sequence Security Bypass - Ver2 (CVE-2012-1443)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2006-222	CVE-2006-1730	Mozilla Firefox CSS letter-spacing Heap Overflow - Ver2 (CVE-2006-1730)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1253	CVE-2012-0774	Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08) - Ver2 (CVE-2012-0774)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1240	CVE-2009-3677	Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1228	CVE-2005-0803	Internet Explorer EMF File Rendering Denial of Service - Ver2 (CVE-2005-0803)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1239	CVE-2012-2528	Microsoft Office RTF File listid Use-After-Free Code Execution (MS12-064) - Ver2 (CVE-2012-2528)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1207	CVE-2007-1658	Microsoft Windows Vista Windows Mail File Execution (MS07-034) - Ver2 (CVE-2007-1658)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1301	CVE-2005-2124	GDI WMF File Rendering Code Execution - Ver2 (CVE-2005-2124)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1210	CVE-2012-2536	Microsoft SCCM Reflected Cross-site Scripting (MS12-062) - Ver2 (CVE-2012-2536)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1254	CVE-2005-0771	Veritas Backup Exec Server Remote Registry Access Code Execution - Ver2 (CVE-2005-0771)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1248	CVE-2013-5716	GomPlayer wav Buffer Overflow - Ver2 (CVE-2013-5716)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1206	CVE-2007-3034	Microsoft Windows Graphics Rendering Engine Code Execution (MS07-046) - Ver2 (CVE-2007-3034)
High	31 Mar 2014	31 Mar 2014	CPAI-2013-1907	CVE-2013-2430	Oracle Java and JavaFX JPEGImageReader Memory Corruption - Ver2 (CVE-2013-2430)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1224	CVE-2005-0435	AWStats rawlog Plugin File Information Disclosure - Ver2 (CVE-2005-0435)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1213	CVE-2007-1765	Microsoft Windows ANI file Denial of Service - Ver2 (CVE-2007-1765)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1229	CVE-2002-0560	Oracle 9i HTTP Server OWA_UTIL Access Information Disclosure - Ver2 (CVE-2002-0560)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1226	CVE-2002-0061	Apache Win32 DOS Batch File Arbitrary Command Execution - Ver2 (CVE-2002-0061)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1300	CVE-2008-2001	Apple Safari out-of-bounds access Denial of Service - Ver2 (CVE-2008-2001)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1278	CVE-2011-4156	HP Network Node Manager Cross-Site Scripting - Ver2 (CVE-2011-4156)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1289	CVE-2012-0155	Internet Explorer VML Remote Code Execution (MS12-010) - Ver2 (CVE-2012-0155)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1284	CVE-2009-0855	IBM WebSphere Application Server Cross-Site Scripting - Ver2 (CVE-2009-0855)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1283	CVE-2008-1999	Apple Safari for Windows URL Address Spoofing - Ver2 (CVE-2008-1999)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1295	CVE-2007-5348	Microsoft Windows GDI+ VML Gradient Buffer Overflow (MS08-052) - Ver2 (CVE-2007-5348)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1190	CVE-2007-0099	Microsoft XML Core Services Nested Tag (MS08-069) - Ver2 (CVE-2007-0099)
High	31 Mar 2014	31 Mar 2014	CPAI-2005-333	CVE-2005-1790	Internet Explorer JavaScript window() Memory Corruption (MS05-054) - Ver2 (CVE-2005-1790)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1223	CVE-2006-1790	Mozilla Firefox InstallTrigger.install Method Denial of Service - Ver2 (CVE-2006-1790)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1212	CVE-2009-3128	Microsoft Office Excel SxView Record Memory Corruption (MS09-067) - Ver2 (CVE-2009-3128)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1286	CVE-2012-4786	Microsoft Windows TrueType Font Parsing Remote Code Execution (MS12-078) - Ver2 (CVE-2012-4786)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1200	CVE-2010-2553	Microsoft Windows Cinepak Codec Remote Code Execution (MS10-055) - Ver2 (CVE-2010-2553)
High	31 Mar 2014	31 Mar 2014	CPAI-2013-1909	CVE-2013-2429	Oracle Java JPEGImageWriter Memory Corruption - Ver2 (CVE-2013-2429)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1251	CVE-2002-0649	MSSQL 2000MSDE Resolution Buffer Overflow - Ver2 (CVE-2002-0649)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1272	CVE-2013-6128	KingView ActiveX Control Directory Traversal - Ver2 (CVE-2013-6128)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1221	CVE-2005-0752	Firefox Plugin Finder Javascript Injection - Ver2 (CVE-2005-0752)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1220	CVE-2008-2463	Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download - Ver2 (CVE-2008-2463)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1312	CVE-2012-2027	Adobe Photoshop Tiff File RLE Compression Buffer Overflow - Ver2 (CVE-2012-2027)
Medium	31 Mar 2014	31 Mar 2014	CPAI-2014-1276	CVE-2013-5962	WordPress Complete Gallery Manager Plugin Arbitrary Code Execution - Ver2 (CVE-2013-5962)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1296	CVE-2011-4166	HP Managed printing Administration jobAcct Remote Command Execution - Ver2 (CVE-2011-4166)
High	31 Mar 2014	31 Mar 2014	CPAI-2014-1282	CVE-2002-1412	Bharat Mediratta Gallery captionator.php GALLERY_BASEDIR Parameter PHP Code Execution - Ver2 (CVE-2002-1412)
Critical	31 Mar 2014	31 Mar 2014	CPAI-2014-1209	CVE-2008-4028	Microsoft Word RTF Drawing Primitives Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4028)