Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	29 Mar 2017	14 Jun 2017	CPAI-2017-0249		CVE-2017-7269	Microsoft IIS WebDAV ScStoragePathFromUrl Buffer Overflow (CVE-2017-7269)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0492	Adobe Security Bulletin APSB17-17	CVE-2017-3083	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3083)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0490	Adobe Security Bulletin APSB17-17	CVE-2017-3084	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3084)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0497	Adobe Security Bulletin APSB17-17	CVE-2017-3076	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3076)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0495	Adobe Security Bulletin APSB17-17	CVE-2017-3078	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3078)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0488	Microsoft CVE-2017-8468	CVE-2017-8468	Microsoft Win32k Elevation of Privilege (CVE-2017-8468)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0470	Microsoft CVE-2017-8497	CVE-2017-8497	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8497)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0496	Adobe Security Bulletin APSB17-17	CVE-2017-3075	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3075)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0485	Microsoft CVE-2017-8509	CVE-2017-8509	Microsoft Office Remote Code Execution (CVE-2017-8509)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0456	Microsoft CVE-2017-8529	CVE-2017-8529	Microsoft Browser Information Disclosure (CVE-2017-8529)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0491	Adobe Security Bulletin APSB17-17	CVE-2017-3082	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3082)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0483	Microsoft CVE-2017-8465	CVE-2017-8465	Microsoft Win32k Elevation of Privilege (CVE-2017-8465)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0498	Adobe Security Bulletin APSB17-17	CVE-2017-3077	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3077)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0457	Microsoft CVE-2017-0215	CVE-2017-0215	Microsoft Device Guard Code Integrity Policy Security Feature Bypass (CVE-2017-0215)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0471	Microsoft CVE-2017-8524	CVE-2017-8524	Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8524)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0476	Microsoft CVE-2017-8547	CVE-2017-8547	Microsoft Internet Explorer Memory Corruption (CVE-2017-8547)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0493	Adobe Security Bulletin APSB17-17	CVE-2017-3079	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3079)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0487	Microsoft CVE-2017-8466	CVE-2017-8466	Microsoft Windows Cursor Elevation of Privilege (CVE-2017-8466)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0494	Adobe Security Bulletin APSB17-17	CVE-2017-3081	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3081)
Critical	12 Jun 2017	12 Jun 2017	CPAI-2017-0503		CVE-2017-4914	VMware vSphere Data Protection Remote Code Execution (CVE-2017-4914)
Critical	4 Jun 2017	11 Jun 2017	CPAI-2017-0462	Metasploit	CVE-2017-6553	Quest Privilege Manager pmmasterd Buffer Overflow (CVE-2017-6553)
Medium	11 Jun 2017	11 Jun 2017	CPAI-2017-0500	Digium		Digium Asterisk chan_skinny SCCP packet Denial of Service
Medium	6 Jun 2017	7 Jun 2017	CPAI-2017-0469	HPE	CVE-2017-5812	HPE Network Automation PermissionFilter Authentication Bypass (CVE-2017-5812)
Critical	15 Mar 2017	7 Jun 2017	CPAI-2017-0227	Brocade	CVE-2016-8204	Brocade Network Advisor FileReceiveServlet filename Directory Traversal (CVE-2016-8204)
Medium	7 Jun 2017	7 Jun 2017	CPAI-2017-0478	Splunk SPL-128840		Splunk Enterprise alerts alerts_id Server-Side Request Forgery
Critical	21 May 2017	7 Jun 2017	CPAI-2017-0428			PDF File Containing Ransomware Downloader
Critical	7 Jun 2017	7 Jun 2017	CPAI-2017-0473			PowerShell Script Encoding Evasion
Medium	4 Jun 2017	5 Jun 2017	CPAI-2017-0463	Trend Micro		Trend Micro Control Manager XML External Entity Processing
Medium	29 May 2017	5 Jun 2017	CPAI-2017-0460	Foxit Software	CVE-2016-8334	Foxit PDF Reader JBIG2 Symbol Dictionary Out of Bounds Read (CVE-2016-8334)
Medium	5 Jun 2017	5 Jun 2017	CPAI-2017-0465	Trend Micro		Trend Micro IWSVA ReportHandler DoCmd Command Injection
Medium	5 Jun 2017	5 Jun 2017	CPAI-2017-0464	HPE	CVE-2017-5791	HPE Intelligent Management Center UrlAccessController Authentication Bypass (CVE-2017-5791)
Medium	5 Jun 2017	5 Jun 2017	CPAI-2017-0468	ISC	CVE-2017-3138	ISC BIND rndc Control Channel Interface Assertion Failure Denial of Service (CVE-2017-3138)
Medium	1 Jun 2017	5 Jun 2017	CPAI-2017-0459	TrendMicro		Trend Micro Control Manager ProductTree_RightWindow XML External Entity Processing
Medium	24 May 2017	4 Jun 2017	CPAI-2017-0441	Mailstore Software		MailStore Server search-result Reflected Cross-Site Scripting
Medium	24 May 2017	1 Jun 2017	CPAI-2017-0442	Trend Micro VRTS-388		Trend Micro Smart Protection Server wcs_bwlists_handler.php Command Injection
Medium	11 May 2017	1 Jun 2017	CPAI-2017-0412	Dovecot	CVE-2016-8652	Dovecot SASL Authentication Component Denial of Service (CVE-2016-8652)
Critical	29 May 2017	29 May 2017	CPAI-2017-0452		CVE-2017-8537	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8537)
Critical	29 May 2017	29 May 2017	CPAI-2017-0450		CVE-2017-8536	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8536)
Medium	24 May 2017	29 May 2017	CPAI-2017-0455	WordPress		WordPress REST API Posts Controller Privilege Escalation
Critical	29 May 2017	29 May 2017	CPAI-2017-0453		CVE-2017-8541	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8541)
Medium	8 Jan 2017	29 May 2017	CPAI-2016-0969	PowerDNS	CVE-2016-5427	PowerDNS Authoritative Server Dot Character Denial of Service (CVE-2016-5427)
High	24 Apr 2017	29 May 2017	CPAI-2017-0325	GnuTLS GNUTLS-SA-2017-1	CVE-2017-5334	GnuTLS Proxy Certificate Information Extension Memory Corruption (CVE-2017-5334)
Critical	29 May 2017	29 May 2017	CPAI-2017-0449		CVE-2017-8540	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8540)
Critical	29 May 2017	29 May 2017	CPAI-2017-0446		CVE-2017-8538	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8538)
Critical	29 May 2017	29 May 2017	CPAI-2017-0454		CVE-2017-8539	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8539)
Critical	29 May 2017	29 May 2017	CPAI-2017-0447		CVE-2017-8535	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8535)
Medium	11 May 2017	28 May 2017	CPAI-2017-0411	Ntp.org	CVE-2017-6464	Network Time Protocol Daemon peer xmit mode Denial of Service (CVE-2017-6464)
High	23 Apr 2017	28 May 2017	CPAI-2017-0312	Trend Micro		Trend Micro SafeSync for Enterprise storage.pm discovery_iscsi_device Command Injection
High	30 Apr 2017	28 May 2017	CPAI-2017-0348	HPE	CVE-2017-5789	HPE LoadRunner and Performance Center libxdrutil.dll mxdr_string Heap Buffer Overflow (CVE-2017-5789)
Medium	24 Apr 2017	28 May 2017	CPAI-2017-0322	Trend Micro		Trend Micro SafeSync for Enterprise rollback Command Injection