Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0176	Microsoft MS17-011	CVE-2017-0072	Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0072)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0159	Microsoft MS17-013	CVE-2017-0060 CVE-2017-0062	Microsoft Windows GDI+ Information Disclosure (MS17-013; CVE-2017-0060; CVE-2017-0062)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0086	Microsoft MS17-014	CVE-2017-0030	Microsoft Office Memory Corruption (MS17-014: CVE-2017-0030)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0090	Microsoft MS17-014	CVE-2017-0031	Microsoft Office Memory Corruption (MS17-014: CVE-2017-0031)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0178	Microsoft MS17-018	CVE-2017-0078 CVE-2017-0079	Microsoft Win32k Elevation of Privilege (MS17-018: CVE-2017-0079; CVE-2017-0078)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0103	Microsoft MS17-006	CVE-2017-0049	Microsoft Scripting Engine Information Disclosure (MS17-006: CVE-2017-0049)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0110	Microsoft MS17-007	CVE-2017-0032	Microsoft Scripting Engine Memory Corruption (MS17-007: CVE-2017-0032)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0172	Microsoft MS17-014	CVE-2017-0052	Microsoft Office Memory Corruption (MS17-014: CVE-2017-0052)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0092	Microsoft MS17-007	CVE-2017-0034	Microsoft Edge Memory Corruption (MS17-007: CVE-2017-0034)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0163	Microsoft MS17-017	CVE-2017-0050	Microsoft Windows Kernel Elevation of Privilege (MS17-017: CVE-2017-0050)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0094	Microsoft MS17-007	CVE-2017-0035	Microsoft Edge Memory Corruption (MS17-007: CVE-2017-0035)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0165	Microsoft MS17-007	CVE-2017-0069	Microsoft Edge Spoofing (MS17-007: CVE-2017-0069)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0191	Microsoft MS17-018	CVE-2017-0056	Microsoft Windows Win32k Elevation of Privilege (MS17-018: CVE-2017-0056)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0085	Microsoft MS17-013	CVE-2017-0047	Microsoft Windows GDI Elevation of Privilege (MS17-013: CVE-2017-0047)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0209	Microsoft MS17-016	CVE-2017-0055	Microsoft IIS Server XSS Elevation of Privilege (MS17-016: CVE-2017-0055)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0183	Microsoft MS17-013	CVE-2017-0108	Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0108)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0187	Microsoft MS17-012	CVE-2017-0100	Microsoft Windows COM Elevation of Privilege (MS17-012: CVE-2017-0100)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0173	Microsoft MS17-014	CVE-2017-0105	Microsoft Office Information Disclosure (MS17-014: CVE-2017-0105)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0213	Adobe APSB17-07	CVE-2017-2997	Adobe Flash Player Stack Buffer Overflow (APSB17-07: CVE-2017-2997)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0218	Adobe APSB17-07	CVE-2017-2999	Adobe Flash Player Memory Corruption (APSB17-07: CVE-2017-2999)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0217	Adobe APSB17-07	CVE-2017-2998	Adobe Flash Player Memory Corruption (APSB17-07: CVE-2017-2998)
High	12 Mar 2017	12 Mar 2017	CPAI-2017-0220			GSM SIM Editor 5.15 Buffer Overflow
High	12 Mar 2017	12 Mar 2017	CPAI-2017-0216			FusionVM Security Scanner
Medium	26 Feb 2017	9 Mar 2017	CPAI-2017-0145		CVE-2016-8377	Fatek Automation PLC WinProladder Stack Buffer Overflow (CVE-2016-8377)
Medium	27 Feb 2017	9 Mar 2017	CPAI-2017-0147	Brocade	CVE-2016-8206 CVE-2016-8207	Brocade Network Advisor Directory Traversal (CVE-2016-8206; CVE-2016-8207)
High	9 Mar 2017	9 Mar 2017	CPAI-2017-0208	Trend Micro		Trend Micro Control Manager download.php Information Disclosure
Medium	27 Feb 2017	2 Mar 2017	CPAI-2017-0152	Trend Micro 1116624		Trend Micro Control Manager importFile.php Directory Traversal
High	23 Feb 2017	1 Mar 2017	CPAI-2017-0144	HPE	CVE-2016-8519	HPE Operations Orchestration Insecure Deserialization (CVE-2016-8519)
Critical	28 Feb 2017	1 Mar 2017	CPAI-2017-0155			Java Applet FTP Protocol Stream Injection
Critical	27 Feb 2017	27 Feb 2017	CPAI-2017-0148	Brocade	CVE-2016-8205	Brocade Network Advisor DashboardFileReceiveServlet filename Directory Traversal (CVE-2016-8205)
High	26 Jan 2017	26 Feb 2017	CPAI-2017-0068		CVE-2017-5154	Advantech WebAccess updateTemplate.aspx SQL Injection (CVE-2017-5154)
Medium	14 Feb 2017	26 Feb 2017	CPAI-2017-0128		CVE-2009-3861	SafeNet SoftRemote GROUPNAME Buffer Overflow (CVE-2009-3861)
Critical	22 Feb 2017	26 Feb 2017	CPAI-2017-0139		CVE-2017-3271	Oracle OIT PDF Parser Code Execution (CVE-2017-3271)
Critical	31 Jan 2017	23 Feb 2017	CPAI-2017-0072			Chrome Fake Font Malware Installer
Critical	23 Jan 2017	22 Feb 2017	CPAI-2017-0044	Adobe APSB17-01	CVE-2017-2959	Adobe Acrobat and Reader Heap Overflow (APSB17-01: CVE-2017-2959)
Critical	20 Feb 2017	22 Feb 2017	CPAI-2017-0137			Magento RSS Brute Force Attempt
Critical	21 Feb 2017	21 Feb 2017	CPAI-2017-0140			Piwik Superuser Unauthorized File Upload
High	12 Feb 2017	15 Feb 2017	CPAI-2017-0123			Beetel Connection Manager Buffer Overflow
High	13 Feb 2017	15 Feb 2017	CPAI-2017-0121			Total Video Player SEH Buffer Overflow
Critical	14 Feb 2017	15 Feb 2017	CPAI-2017-0127	Adobe APSB17-04	CVE-2017-2986	Adobe Flash Player Heap Buffer Overflow (APSB17-04: CVE-2017-2986)
High	12 Feb 2017	14 Feb 2017	CPAI-2017-0113	Metasploit		VUPlayer CUE File Buffer Overflow
High	14 Feb 2017	14 Feb 2017	CPAI-2017-0126	Rapid7	CVE-2007-2888	UltraISO CUE File Parsing Buffer Overflow (CVE-2007-2888)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0114	Adobe APSB17-04	CVE-2017-2982	Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2982)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0119	Adobe APSB17-04	CVE-2017-2996	Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2996)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0124	Adobe APSB17-04	CVE-2017-2992	Adobe Flash Player Heap Buffer Overflow (APSB17-04: CVE-2017-2992)
Medium	24 Jan 2017	8 Feb 2017	CPAI-2017-0073	Microsoft MS17-001	CVE-2017-0002	Microsoft Edge document.domain Same Origin Policy Bypass (MS17-001: CVE-2017-0002)
Critical	7 Feb 2017	8 Feb 2017	CPAI-2017-0107		CVE-2017-5521	NETGEAR Routers Authentication Bypass (CVE-2017-5521)
Critical	12 Jan 2017	5 Feb 2017	CPAI-2017-0026	Adobe APSB17-01	CVE-2017-2946	Adobe Acrobat and Reader Out of Bounds Read (APSB17-01: CVE-2017-2946)
Critical	2 Feb 2017	2 Feb 2017	CPAI-2017-0081			WordPress REST API Content Injection
Medium	24 Jan 2017	1 Feb 2017	CPAI-2017-0064		CVE-2015-8523	IBM Tivoli Storage Manager FastBack Server Denial of Service (CVE-2015-8523)