Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	18 May 2015	18 May 2015	CPAI-2015-0761		CVE-2013-3860	Microsoft .NET Framework Entity Expansion Denial of Service (MS13-082) - Ver2 (CVE-2013-3860)
High	18 May 2015	18 May 2015	CPAI-2014-0001		CVE-2013-3156	Microsoft Access ACCDB File Memory Corruption (MS13-074: CVE-2013-3156) - Ver2
High	18 May 2015	18 May 2015	CPAI-2015-0712		CVE-2008-3015	Microsoft Windows GDI+ BMP File Parsing Integer Overflow (MS08-052) - Ver2 (CVE-2008-3015)
Low	18 May 2015	18 May 2015	CPAI-2015-0770		CVE-2007-4280	Asterisk chan_skinny CAPABILITIES_RES_MESSAGE Denial of Service - Ver2 (CVE-2007-4280)
Medium	18 May 2015	18 May 2015	CPAI-2015-0766		CVE-2004-1014	Nfsutils TCP Connection Termination Denial of Service attack - Ver2 (CVE-2004-1014)
Critical	18 May 2015	18 May 2015	CPAI-2004-142		CVE-2004-0444	Norton Internet Security NBNS Response Processing Stack Overflow - Ver2 (CVE-2004-0444)
High	18 May 2015	18 May 2015	CPAI-2015-0720		CVE-2004-2416	CCProxy Telnet Ping Hostname Buffer Overflow - Ver2 (CVE-2004-2416)
Medium	18 May 2015	18 May 2015	CPAI-2015-0755		CVE-2005-0356	Multiple Vendor TCP Timestamp Option Denial of Service attack - Ver2 (CVE-2005-0356)
High	18 May 2015	18 May 2015	CPAI-2015-0767		CVE-2010-0823	Microsoft Excel Malformed Chart Sheet Substream Memory Corruption (MS10-038) - Ver2 (CVE-2010-0823)
High	18 May 2015	18 May 2015	CPAI-2015-0741		CVE-2010-3331	Microsoft Internet Explorer MSHTML Uninitialized Memory Corruption (MS10-071) - Ver2 (CVE-2010-3331)
High	18 May 2015	18 May 2015	CPAI-2015-0739		CVE-2013-1282	Microsoft Active Directory LDAP Request Memory Consumption (MS13-032) - Ver2 (CVE-2013-1282)
High	18 May 2015	18 May 2015	CPAI-2015-0706		CVE-2011-0976	Microsoft PowerPoint OfficeArt Atom Remote Code Execution (MS11-022) - Ver2 (CVE-2011-0976)
Critical	18 May 2015	18 May 2015	CPAI-2015-0738		CVE-2011-4535	ScadaTEC ScadaPhone and ModbusTagServer SCADA Remote Code Execution - Ver2 (CVE-2011-4535)
High	18 May 2015	18 May 2015	CPAI-2015-0718		CVE-2009-3691	IBM Informix Client NFX Buffer Overflow - Ver2 (CVE-2009-3691)
High	18 May 2015	18 May 2015	CPAI-2015-0729		CVE-2014-0422	Oracle Java JNDI Sandbox Bypass - Ver2 (CVE-2014-0422)
High	18 May 2015	18 May 2015	CPAI-2015-0733		CVE-2013-3346	Adobe Acrobat and Reader ToolButton Use After Free (APSB13-15) - Ver2 (CVE-2013-3346)
Critical	18 May 2015	18 May 2015	CPAI-2015-0695		CVE-2014-0591	ISC BIND NSEC3-Signed Zones Queries Processing Denial of Service - Ver2 (CVE-2014-0591)
High	18 May 2015	18 May 2015	CPAI-2015-0698		CVE-2012-1858	Microsoft Internet Explorer HTML Sanitization Information Disclosure (MS12-037) - Ver2 (CVE-2012-1858)
High	18 May 2015	18 May 2015	CPAI-2015-0713		CVE-2008-2258	Microsoft Internet Explorer Table Layout Memory Corruption - Ver2 (CVE-2008-2258)
Medium	18 May 2015	18 May 2015	CPAI-2015-0709		CVE-2012-1710	Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)
High	18 May 2015	18 May 2015	CPAI-2015-0753		CVE-2009-1492	Adobe Acrobat getAnnots Remote Code Execution - Ver2 (CVE-2009-1492)
Critical	18 May 2015	18 May 2015	CPAI-2014-1810		CVE-2011-0917	Multiple Vendors LDAP Server Remote Denial of Service Vulnerabilities - Ver2 (CVE-2011-0917)
Critical	18 May 2015	18 May 2015	CPAI-2015-0732		CVE-2013-3871	Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3871) - Ver2
High	18 May 2015	18 May 2015	CPAI-2015-0725		CVE-2010-3945	Microsoft Graphics Filters CGM Image Converter Buffer Overrun (MS10-105) - Ver2 (CVE-2010-3945)
High	18 May 2015	18 May 2015	CPAI-2015-0765		CVE-2004-0848	Microsoft Office Long HTML Link Processing Buffer Overflow - Ver2 (CVE-2004-0848)
High	18 May 2015	18 May 2015	CPAI-2015-0730		CVE-2009-4225	Ca eTrust PestPatrol Antispyware ActiveX Buffer Overflow106 - Ver2 (CVE-2009-4225)
Critical	18 May 2015	18 May 2015	CPAI-2015-0576	Adobe APSB15-10	CVE-2015-3054	Adobe Acrobat and Reader WillSave Document Action Use-After-Free (APSB15-10: CVE-2015-3054)
Critical	18 May 2015	18 May 2015	CPAI-2015-0702		CVE-2004-1099	Cisco Secure ACS EAPTLS Authentication Bypass - Ver2 (CVE-2004-1099)
Critical	18 May 2015	18 May 2015	CPAI-2015-0724		CVE-2012-2049	Adobe Acrobat and Reader U3D Texture Parsing Buffer Overflow (APSB12-16) - Ver2 (CVE-2012-2049)
High	18 May 2015	18 May 2015	CPAI-2015-0751		CVE-2010-0899	Oracle Secure Backup Administration property_box.php Command Injection - Ver2 (CVE-2010-0899)
High	18 May 2015	18 May 2015	CPAI-2015-0731		CVE-2015-0203	Apache Qpid Session.gap Denial of Service - Ver2 (CVE-2015-0203)
Critical	18 May 2015	18 May 2015	CPAI-2015-0747		CVE-2013-3763	Oracle Endeca Server createDataStore Remote Command Execution - Ver2 (CVE-2013-3763)
Critical	18 May 2015	18 May 2015	CPAI-2015-0757		CVE-2004-0900	Microsoft Windows NT 4.0 DHCP Server Request Buffer Overflow attack - Ver2 (CVE-2004-0900)
Critical	18 May 2015	18 May 2015	CPAI-2015-0736		CVE-2006-0736	Novell CASA PAM Module Stack Buffer Overflow - Ver2 (CVE-2006-0736)
High	18 May 2015	18 May 2015	CPAI-2015-0759		CVE-2008-2636	Linksys WRH54G HTTP Management Interface DoS Code Execution - Ver2 (CVE-2008-2636)
Medium	18 May 2015	18 May 2015	CPAI-2015-0742		CVE-2012-4914	CoolPDF Reader Image Stream Processing Buffer Overflow - Ver2 (CVE-2012-4914)
Critical	18 May 2015	18 May 2015	CPAI-2015-0758		CVE-2012-1885	Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076) - Ver2 (CVE-2012-1885)
High	18 May 2015	18 May 2015	CPAI-2015-0714		CVE-2011-2194	VLC Media Player XSPF Playlist Integer Overflow - Ver2 (CVE-2011-2194)
High	18 May 2015	18 May 2015	CPAI-2015-0764		CVE-2012-0175	Microsoft Windows File and Directory Name Command Injection (MS12-048) - Ver2 (CVE-2012-0175)
High	18 May 2015	18 May 2015	CPAI-2015-0752		CVE-2013-2472	Oracle Java Runtime Environment ShortComponentRaster.verify Memory Corruption - Ver2 (CVE-2013-2472)
High	18 May 2015	18 May 2015	CPAI-2015-0748		CVE-2011-0978	Microsoft Office Excel CatSerRange Record Remote Code Execution (MS11-021) - Ver2 (CVE-2011-0978)
High	18 May 2015	18 May 2015	CPAI-2015-0746		CVE-2012-4820	IBM Java ProxyUtil Sandbox Breach - Ver2 (CVE-2012-4820)
Critical	18 May 2015	18 May 2015	CPAI-2015-0700		CVE-2014-8142	PHP Core unserialize process nested data Use After Free - Ver2 (CVE-2014-8142)
Medium	18 May 2015	18 May 2015	CPAI-2015-0703		CVE-2012-5703	VMware ESX and ESXi Server SOAP Request Handling Denial Of Service - Ver2 (CVE-2012-5703)
Critical	18 May 2015	18 May 2015	CPAI-2015-0769		CVE-2014-8455	Adobe Acrobat And Reader Use-After-Free (APSB14-28: CVE-2014-8455) - Ver2
Critical	9 Feb 2015	17 May 2015	CPAI-2015-0145	SAP	CVE-2014-9264	SAP SQL Anywhere .NET Data Provider Column Alias Buffer Overflow (CVE-2014-9264)
High	2 Mar 2015	17 May 2015	CPAI-2015-0203	Symantec	CVE-2014-7288	Symantec Encryption Management Server Database Backup Command Injection (CVE-2014-7288)
Critical	11 May 2015	17 May 2015	CPAI-2015-0558	Adobe APSB10-02	CVE-2009-3953	Adobe Reader U3D array boundary code execution (APSB10-02: CVE-2009-3953)
Critical	12 May 2015	14 May 2015	CPAI-2015-0537	Microsoft MS15-043	CVE-2015-1709	Microsoft Internet Explorer Memory Corruption (MS15-043: CVE-2015-1709)
Critical	29 Apr 2015	13 May 2015	CPAI-2015-0512		CVE-2014-8142 CVE-2015-0231	PHP Core unserialize process nested data Use After Free - ver 2 (CVE-2014-8142; CVE-2015-0231)