Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	3 Mar 2014	3 Mar 2014	CPAI-2014-1080		CVE-2008-4027	Microsoft Word RTF Object Parsing Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4027)
Medium	3 Mar 2014	3 Mar 2014	CPAI-2014-1004		CVE-2010-1308	D-link DSL-2640B Router Admin password change Information Disclosure - Ver2 (CVE-2010-1308)
Medium	3 Mar 2014	3 Mar 2014	CPAI-2014-1011		CVE-2007-0429	DivX ActiveX Browser Plugin Denial of Service - Ver2 (CVE-2007-0429)
Critical	3 Mar 2014	3 Mar 2014	CPAI-2011-519		CVE-2011-0802	Oracle Java FileDialog.Show Heap Buffer Overflow - Ver2 (CVE-2011-0802)
Critical	3 Mar 2014	3 Mar 2014	CPAI-2014-1081		CVE-2009-4897	Ghostscript Pdf parsing Buffer Overflow - Ver2 (CVE-2009-4897)
High	3 Mar 2014	3 Mar 2014	CPAI-2014-1049		CVE-2007-3073	Firefox resource Local File Read Directory Traversal - Ver2 (CVE-2007-3073)
Critical	3 Mar 2014	3 Mar 2014	CPAI-2014-1124		CVE-2008-1087	Microsoft Windows GDI EMF Image File Handling Stack Overflow (MS08-021) - Ver2 (CVE-2008-1087)
Medium	3 Mar 2014	3 Mar 2014	CPAI-2005-240		CVE-2005-1477	Mozilla Firefox IconURL Arbitrary JavaScript Execution - Ver2 (CVE-2005-1477)
Critical	3 Mar 2014	3 Mar 2014	CPAI-2014-0997		CVE-2007-2815	Microsoft IIS WebHits Authentication Bypass - Ver2 (CVE-2007-2815)
Critical	3 Mar 2014	3 Mar 2014	CPAI-2014-0996		CVE-2002-0012	Cisco IOS Malformed SNMP Message-Handling Denial of Service - Ver2 (CVE-2002-0012)
High	3 Mar 2014	3 Mar 2014	CPAI-2014-0999		CVE-2011-4929	Redmine Repository Controller Command Execution - Ver2 (CVE-2011-4929)
High	3 Mar 2014	3 Mar 2014	CPAI-2014-1052		CVE-2005-1219	Microsoft Windows Color Management Module ICC Profile Buffer Overflow - Ver2 (CVE-2005-1219)
Critical	3 Mar 2014	3 Mar 2014	CPAI-2014-1107		CVE-2008-0077	Internet Explorer ANIMATEMOTION Memory Corruption (MS08-010) - Ver2 (CVE-2008-0077)
Critical	3 Mar 2014	3 Mar 2014	CPAI-2014-0989		CVE-2008-0082	MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050) - Ver2 (CVE-2008-0082)
High	3 Mar 2014	3 Mar 2014	CPAI-2014-1078		CVE-2008-2283	Idautomation ActiveX Arbitrary File Overwrite - Ver2 (CVE-2008-2283)
Medium	3 Mar 2014	3 Mar 2014	CPAI-2014-1043		CVE-1999-1317	Microsoft Windows symbolic link table Privilege Escalation - Ver2 (CVE-1999-1317)
High	3 Mar 2014	3 Mar 2014	CPAI-2014-1070		CVE-2009-2514	Microsoft Windows Win32k EOT Parsing Integer Overflow (MS09-065) - Ver2 (CVE-2009-2514)
High	3 Mar 2014	3 Mar 2014	CPAI-2014-0982		CVE-2009-1129	Microsoft PowerPoint Converter ExEmbed Record Stack Corruption (MS09-017) - Ver2 (CVE-2009-1129)
High	3 Mar 2014	3 Mar 2014	CPAI-2006-210		CVE-2006-1359	Internet Explorer createTextRange Remote Code Execution (MS06-013) - Ver2 (CVE-2006-1359)
High	3 Mar 2014	3 Mar 2014	CPAI-2014-1051		CVE-2009-3135	Microsoft Office Word Legacy File Remote Code Execution (MS09-068) - Ver2 (CVE-2009-3135)
Critical	2 Mar 2014	2 Mar 2014	CPAI-2014-0891	CVE-2013-4837		HP LoadRunner Virtual User Generator EmulationAdmin Directory Traversal (CVE-2013-4837)
Critical	5 Feb 2014	2 Mar 2014	CPAI-2014-0891		CVE-2013-4837	HP LoadRunner Virtual User Generator EmulationAdmin Directory Traversal (CVE-2013-4837)
Critical	27 Feb 2014	2 Mar 2014	CPAI-2014-0952	HP c03969437	CVE-2013-4838	HP LoadRunner Virtual User Generator saveCodeRuleFile Directory Traversal (CVE-2013-4838)
High	27 Feb 2014	27 Feb 2014	CPAI-2014-0377	CVE-2013-7091		Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)
High	12 Jan 2014	27 Feb 2014	CPAI-2014-0377		CVE-2013-7091	Zimbra Collaboration Server Local File Inclusion (CVE-2013-7091)
High	26 Feb 2014	26 Feb 2014	CPAI-2014-0949			Suspicious Non-Alphanumeric JavaScript Encoding
High	26 Feb 2014	26 Feb 2014	CPAI-2014-0933			Multiple Routers HNAP Insecure Implementation Privilege Escalation
Medium	11 Mar 2014	26 Feb 2014	CPAI-2014-0948	CVE-2013-2551		Suspicious HTML Containing Overly Long Text (CVE-2013-2551)
Medium	25 Feb 2014	26 Feb 2014	CPAI-2014-0948		CVE-2013-2551	Suspicious HTML Containing Overly Long Text (CVE-2013-2551)
High	25 Feb 2014	26 Feb 2014	CPAI-2014-0947			Suspicious Html Encoding Within HTTP Responses
Medium	25 Feb 2014	25 Feb 2014	CPAI-2014-0932	CVE-2011-4004		Cisco WebEx Player ATAS32.DLL Remote Code Execution (CVE-2011-4004)
Medium	23 Feb 2014	25 Feb 2014	CPAI-2014-0932		CVE-2011-4004	Cisco WebEx Player ATAS32.DLL Remote Code Execution (CVE-2011-4004)
Critical	19 Feb 2014	19 Feb 2014	CPAI-2014-0919	CVE-2014-0493		Adobe Acrobat and Reader Memory Corruption (APSB14-01; CVE-2014-0493)
Critical	18 Feb 2014	18 Feb 2014	CPAI-2014-0918		CVE-2014-0495	Adobe Acrobat and Reader Memory Corruption (APSB14-01: CVE-2014-0495)
High	12 Feb 2014	17 Feb 2014	CPAI-2014-0912		CVE-2008-0109	Microsoft Word File Handling Memory Corruption (MS08-009) - ver 2 (CVE-2008-0109)
Medium	13 Feb 2014	13 Feb 2014	CPAI-2014-0917			PHP Filter Wrapper Information Disclosure
Critical	11 Feb 2014	11 Feb 2014	CPAI-2014-0375			Web Browsers iFrame Tag Injection
Critical	11 Feb 2014	11 Feb 2014	CPAI-2014-0871		CVE-2014-0276	Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0276)
High	10 Feb 2014	10 Feb 2014	CPAI-2014-0902		CVE-2013-6447	Red Hat JBoss Seam Framework XXE Information Disclosure (CVE-2013-6447)
Medium	23 Jan 2014	6 Feb 2014	CPAI-2014-0760		CVE-2013-5398	IBM Rational Focal Point RequestAccessController Servlet Information Disclosure (CVE-2013-5398)
Medium	23 Jan 2014	6 Feb 2014	CPAI-2014-0763		CVE-2013-5397	IBM Rational Focal Point Login Servlet Information Disclosure (CVE-2013-5397)
Critical	7 Jan 2014	5 Feb 2014	CPAI-2014-0104		CVE-2010-1807	Apple Safari Webkit Floating Point Data Type Code Execution - Ver2 (CVE-2010-1807)
Critical	7 Jan 2014	5 Feb 2014	CPAI-2010-395		CVE-2010-1807	Apple Safari Webkit Floating Point Data Type Code Execution - Ver2 (CVE-2010-1807)
High	29 Jan 2014	30 Jan 2014	CPAI-2014-0858		CVE-2012-0201	IBM Personal Communications WorkStation File Processing Buffer Overflow (CVE-2012-0201)
Critical	29 Jan 2014	30 Jan 2014	CPAI-2014-0863			Ingres Database iidbms Heap Overflow - ver 2
Critical	22 Jan 2014	27 Jan 2014	CPAI-2014-0759		CVE-2014-0496	Adobe Acrobat and Reader Use After Free Code Execution (APSB14-01; CVE-2014-0496)
High	20 Jan 2014	21 Jan 2014	CPAI-2014-0752		CVE-2005-3116	VERITAS NetBackup vmd Shared Library Buffer Overflow - ver 2 (CVE-2005-3116)
High	20 Jan 2014	21 Jan 2014	CPAI-2014-0389		CVE-2013-5054	Microsoft Office 2013 Token Hijacking Information Disclosure (MS13-104; CVE-2013-5054)
Critical	19 Jan 2014	20 Jan 2014	CPAI-2014-0749			vSkimmer Point-of-Sale Terminals Server Information Disclosure
Medium	14 Jan 2014	19 Jan 2014	CPAI-2014-0740		CVE-2013-6039	NagiosQL txtSearch Parameter Cross-Site Scripting (CVE-2013-6039)