Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	1 Jun 2017	27 Jun 2017	CPAI-2017-0458			Windows Browser MFT Crash Bug
Critical	4 Jun 2017	27 Jun 2017	CPAI-2017-0461			PowerPoint Malicious Hover Exploit
High	14 Jun 2017	27 Jun 2017	CPAI-2017-0508		CVE-2015-5374	Siemens SIPROTEC Denial of Service (CVE-2015-5374)
Critical	8 Mar 2017	26 Jun 2017	CPAI-2017-0201			Suspicious Metadata Mail Phishing Redirection
High	26 Feb 2017	25 Jun 2017	CPAI-2017-0146	PHP	CVE-2017-5340	PHP zend_hash_destroy Uninitialized Pointer Code Execution (CVE-2017-5340)
Medium	19 Jun 2017	25 Jun 2017	CPAI-2017-0514	HPE	CVE-2017-5811	HPE Network Automation FileServlet Information Disclosure (CVE-2017-5811)
Medium	20 Jun 2017	25 Jun 2017	CPAI-2017-0518	Microsoft	CVE-2017-0271	Microsoft Windows SMB Server SMBv1 Information Disclosure (CVE-2017-0271)
Critical	22 Jun 2017	22 Jun 2017	CPAI-2017-0524			Pseudo DarkLeech Exploit Kits Traffic Distribution System
Critical	22 Jun 2017	22 Jun 2017	CPAI-2017-0526			RoughTED Exploit Kits Traffic Distribution System
Critical	22 Jun 2017	22 Jun 2017	CPAI-2017-0523			Good Man Exploit Kits Traffic Distribution System
High	18 Jun 2017	21 Jun 2017	CPAI-2017-0512	Trend Micro 1117412		Trend Micro IWSVA ManageSRouteSettings HttpServlet Command Injection
Critical	19 Jun 2017	21 Jun 2017	CPAI-2017-0513	IBM	CVE-2017-1092	IBM Informix Dynamic Server index.php testconn Heap Buffer Overflow (CVE-2017-1092)
High	21 Jun 2017	21 Jun 2017	CPAI-2017-0521	HPE	CVE-2017-5822	HPE Intelligent Management Center dbman FileTrans Arbitrary File Write (CVE-2017-5822)
Medium	19 Jun 2017	20 Jun 2017	CPAI-2017-0516		CVE-2017-8311	VideoLan VLC Media Player ParseJSS Heap Buffer Overflow (CVE-2017-8311)
Medium	19 Jun 2017	19 Jun 2017	CPAI-2017-0515	Digium AST-2017-003		Digium Asterisk pjsip_multipart_parse Denial of Service
Critical	10 May 2017	18 Jun 2017	CPAI-2017-0406		CVE-2017-0262	Microsoft Office EPS Remote Code Execution (CVE-2017-0262)
High	17 May 2017	18 Jun 2017	CPAI-2017-0421	Trend Micro		Trend Micro IWSVA LogSettingHandler doPostMountDevice Command Injection
Medium	21 May 2017	18 Jun 2017	CPAI-2017-0430	Metasploit	CVE-2014-4977	Dell SonicWALL Scrutinizer methodDetail SQL Injection (CVE-2014-4977)
Medium	11 Jun 2017	18 Jun 2017	CPAI-2017-0501	OpenVPN	CVE-2017-7478	OpenVPN P_CONTROL Denial of Service (CVE-2017-7478)
Medium	11 Jun 2017	18 Jun 2017	CPAI-2017-0499	OpenLDAP	CVE-2017-9287	OpenLDAP ldapsearch pagesize Double Free Denial of Service (CVE-2017-9287)
Medium	14 Mar 2017	15 Jun 2017	CPAI-2017-0205	Microsoft MS17-010	CVE-2017-0147	Microsoft Windows SMB Information Disclosure (MS17-010: CVE-2017-0147)
Medium	11 Apr 2017	15 Jun 2017	CPAI-2017-0271	Microsoft CVE-2017-0208	CVE-2017-0208	Microsoft Edge Scripting Engine Information Disclosure (CVE-2017-0208)
Medium	15 Jun 2017	15 Jun 2017	CPAI-2017-0509	Trend Micro		Trend Micro InterScan Web Security Virtual Appliance VerboseLog Directory Traversal
Critical	29 Mar 2017	14 Jun 2017	CPAI-2017-0249		CVE-2017-7269	Microsoft IIS WebDAV ScStoragePathFromUrl Buffer Overflow (CVE-2017-7269)
High	24 May 2017	14 Jun 2017	CPAI-2017-0439	Trend Micro		Trend Micro IWSVA PacFileManagement delete_pac_files Command Injection
Medium	5 Jun 2017	14 Jun 2017	CPAI-2017-0467	Mozilla	CVE-2017-5428	Mozilla Firefox createImageBitmap Integer Overflow (CVE-2017-5428)
Medium	7 Jun 2017	14 Jun 2017	CPAI-2017-0481	Jenkins	CVE-2017-1000356	Jenkins CI Server Multiple Cross-Site Request Forgery (CVE-2017-1000356)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0496	Adobe APSB17-17	CVE-2017-3075	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3075)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0498	Adobe APSB17-17	CVE-2017-3077	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3077)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0497	Adobe APSB17-17	CVE-2017-3076	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3076)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0470	Microsoft CVE-2017-8497	CVE-2017-8497	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8497)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0493	Adobe APSB17-17	CVE-2017-3079	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3079)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0494	Adobe APSB17-17	CVE-2017-3081	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3081)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0495	Adobe APSB17-17	CVE-2017-3078	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3078)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0491	Adobe APSB17-17	CVE-2017-3082	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3082)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0492	Adobe APSB17-17	CVE-2017-3083	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3083)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0490	Adobe APSB17-17	CVE-2017-3084	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3084)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0456	Microsoft CVE-2017-8529	CVE-2017-8529	Microsoft Browser Information Disclosure (CVE-2017-8529)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0457	Microsoft CVE-2017-0215	CVE-2017-0215	Microsoft Device Guard Code Integrity Policy Security Feature Bypass (CVE-2017-0215)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0485	Microsoft CVE-2017-8509	CVE-2017-8509	Microsoft Office Remote Code Execution (CVE-2017-8509)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0476	Microsoft CVE-2017-8547	CVE-2017-8547	Microsoft Internet Explorer Memory Corruption (CVE-2017-8547)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0471	Microsoft CVE-2017-8524	CVE-2017-8524	Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8524)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0488	Microsoft CVE-2017-8468	CVE-2017-8468	Microsoft Win32k Elevation of Privilege (CVE-2017-8468)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0487	Microsoft CVE-2017-8466	CVE-2017-8466	Microsoft Windows Cursor Elevation of Privilege (CVE-2017-8466)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0483	Microsoft CVE-2017-8465	CVE-2017-8465	Microsoft Win32k Elevation of Privilege (CVE-2017-8465)
Critical	12 Jun 2017	12 Jun 2017	CPAI-2017-0503		CVE-2017-4914	VMware vSphere Data Protection Remote Code Execution (CVE-2017-4914)
Critical	4 Jun 2017	11 Jun 2017	CPAI-2017-0462	Metasploit	CVE-2017-6553	Quest Privilege Manager pmmasterd Buffer Overflow (CVE-2017-6553)
Medium	11 Jun 2017	11 Jun 2017	CPAI-2017-0500	Digium		Digium Asterisk chan_skinny SCCP packet Denial of Service
Critical	15 Mar 2017	7 Jun 2017	CPAI-2017-0227	Brocade	CVE-2016-8204	Brocade Network Advisor FileReceiveServlet filename Directory Traversal (CVE-2016-8204)
Medium	7 Jun 2017	7 Jun 2017	CPAI-2017-0478	Splunk SPL-128840		Splunk Enterprise alerts alerts_id Server-Side Request Forgery