Home / 2008 Advisories Archive

2008 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	8 Apr 2008	8 Apr 2008	CPAI-2008-056		CVE-2008-0623 CVE-2008-0624 CVE-2008-0625	Yahoo! Music Jukebox ActiveX Control Multiple Buffer Overflows (CVE-2008-0623; CVE-2008-0624; CVE-2008-0625)
Critical	8 Apr 2008	8 Apr 2008	CPAI-2008-050		CVE-2008-1086	Internet Explorer ActiveX Control hxvz.dll Memory Corruption (MS08-023; CVE-2008-1086)
Critical	8 Apr 2008	8 Apr 2008	CPAI-2008-028		CVE-2008-0083	Microsoft Windows Scripting Engines Script Encoding Code Execution (MS08-022; CVE-2008-0083)
Critical	8 Apr 2008	8 Apr 2008	CPAI-2008-054		CVE-2008-1087	Microsoft Windows GDI EMF Image File Handling Stack Overflow (MS08-021; CVE-2008-1087)
Critical	8 Apr 2008	8 Apr 2008	CPAI-2008-053		CVE-2008-1083	Microsoft Windows GDI Metafile Image Handling Heap Overflow (MS08-021; CVE-2008-1083)
High	8 Apr 2008	8 Apr 2008	CPAI-2008-057		CVE-2007-6016	Symantec Backup Exec Server Scheduler ActiveX Control Buffer Overflow (CVE-2007-6016)
Critical	8 Apr 2008	8 Apr 2008	CPAI-2008-048		CVE-2008-1088	Microsoft Project Invalid Memory Pointer Code Execution (MS08-018; CVE-2008-1088)
High	1 Feb 2008	20 Mar 2008	CPAI-2008-202	Microsoft Security Bulletin MS06-032 VOIPSEC	CVE-2006-2379 CVE-2007-1594	IPS-1 Protection Updates for Vulnerabilities in Microsoft Windows and Asterisk and IPS-1 Protocol and Protocol Subsystems Updates
N/A	11 Mar 2008	11 Mar 2008	SBP-2008-04		CVE-2008-0112	SYLK Files (CVE-2008-0112)
Critical	12 Feb 2008	12 Feb 2008	CPAI-2008-022		CVE-2007-4790	Microsoft Visual FoxPro ActiveX Control Buffer Overflow (MS08-010; CVE-2007-4790)
Critical	12 Feb 2008	12 Feb 2008	CPAI-2008-025		CVE-2008-0078	Internet Explorer Image Processing Memory Corruption (MS08-010; CVE-2008-0078)
Critical	12 Feb 2008	12 Feb 2008	CPAI-2008-020		CVE-2007-0065	Microsoft Windows OLE Automation Remote Code Execution (MS08-008; CVE-2007-0065)
Critical	12 Feb 2008	12 Feb 2008	CPAI-2008-023		CVE-2008-0076	Internet Explorer HTML Rendering Memory Corruption (MS08-010; CVE-2008-0076)
Critical	12 Feb 2008	12 Feb 2008	CPAI-2008-024		CVE-2008-0077	Internet Explorer ANIMATEMOTION Memory Corruption (MS08-010; CVE-2008-0077)
High	3 Feb 2008	3 Feb 2008	CPAI-2008-008		CVE-2007-6535	Yahoo! Toolbar URL Shortcut ActiveX Control Buffer Overflow (CVE-2007-6535)
High	3 Feb 2008	3 Feb 2008	CPAI-2008-018		CVE-2008-0237	Microsoft Rich Textbox Control Arbitrary File Overwrite (CVE-2008-0237)
High	17 Jan 2008	17 Jan 2008	CPAI-2008-010		CVE-2007-5660	Macrovision InstallShield Update Service ActiveX Control Code Execution (CVE-2007-5660)
Critical	17 Jan 2008	17 Jan 2008	CPAI-2008-011		CVE-2007-3955	LinkedIn Toolbar IEContextMenu Buffer Overflow (CVE-2007-3955)
High	7 Jan 2008	7 Jan 2008	CPAI-2008-002		CVE-2007-5755	AOL Radio AmpX ActiveX Control Buffer Overflow (CVE-2007-5755)
High	7 Jan 2008	7 Jan 2008	CPAI-2008-001		CVE-2007-6506	HP Software Update Tool ActiveX Control File Overwrite (CVE-2007-6506)
High	31 Oct 2008	1 Jan 2008	CPAI-2008-233	Security Focus Bugtraq ID: 30934	CVE-2008-3892	Update Protection against VMware COM API ActiveX Control Buffer Overflow
Medium	14 Nov 2008	1 Jan 2008	CPAI-2008-236	Secunia: SA30667	CVE-2008-2431	Update Protection against Novell iPrint Client ActiveX Control Multiple Vulnerabilities
Critical	3 Jun 2008	1 Jan 2008	CPAI-2008-212	SECTRACK:1019788 SREASON:3800	CVE-2008-1328	Update Protection against Computer Associates (CA) ARCserve Backup Software for Laptops and Desktops Buffer Overflow Vulnerability
High	25 May 2008	1 Jan 2008	CPAI-2008-071	http://www.spywaresignatures.com/details.php?spyware=find.fmtoolbar http://www.spywaresignatures.com/details.php?spyware=ezreward http://www.ca.com/us/securityadvisor/pest/pest.aspx?id=453090717		Update Protections against Recent Malware Threats (25-May-08)
High	16 Apr 2008	1 Jan 2008	CPAI-2008-058	SecurityFocus: 27756		Update Protection against Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow Vulnerability
High	24 Oct 2008	1 Jan 2008	CPAI-2008-227	Bugtraq ID: 31563	CVE-2008-4501	Update Protection against Rhino Software Serv-U FTP Server RNTO Command Directory Traversal
High	1 Apr 2008	1 Jan 2008	CPAI-2008-051	http://www.enigmasoftware.com/support/?s=mobrules http://spywaredetector.net/spyware_encyclopedia/ToolBar.ZZToolbar.htm http://www.browserdefender.com/file/404730/site/chinarank.org.cn/		Update Protections against Recent Malware Threats (1-Apr-08)
High	12 Feb 2008	1 Jan 2008	CPAI-2008-031	Microsoft Security Bulletin MS08-006	CVE-2008-0075	Preemptive Protection against Microsoft Internet Information Services Cross-Site Scripting Vulnerability (MS08-006)
High	10 Oct 2008	1 Jan 2008	CPAI-2008-225	Secunia: SA32111	CVE-2008-4479	Update Protection against Novell eDirectory SOAP Handling Accept Language Header Overflow
High	1 Jun 2008	1 Jan 2008	CPAI-2008-075	Trojan.eCodec AdWare.Win32.Ejik.bc		Update Protections against Recent Malware Threats (1-Jun-08)
Medium	14 Jan 2008	1 Jan 2008	CPAI-2008-007	SmartDefense Research Center		Integrity Clientless Security (ICS) Update 3.7.201.0
Medium	15 Aug 2008	1 Jan 2008	SBP-2008-25	IPS Research Center		Security Best Practice: Familiarize Yourself with the Time to Live (TTL) Masking Protection
High	15 Aug 2008	1 Jan 2008	SBP-2008-29	CERT Advisory CA-2001-26: Nimda Worm		Security Best Practice: Familiarize Yourself with the General CIFS Worm Catcher
High	30 Apr 2008	1 Jan 2008	CPAI-2008-067	http://www.emsisoft.com/en/malware/?Adware.Win32.MusicOfFaith http://spywarefiles.prevx.com/spywarefiles.asp?FXC=DJFC24641892 http://spywaresignatures.com/details.php?spyware=mxs.toolbar		Update Protections against Recent Malware Threats (30-Apr-08)
High	10 Oct 2008	1 Jan 2008	CPAI-2008-224	SecurityTracker Alert ID:  1020786	CVE-2008-4478	Novell eDirectory HTTP Request Content-Length Heap Buffer Overflow
High	15 Aug 2008	1 Jan 2008	SBP-2008-28	IPS Research Center	CVE-2002-0957 CVE-2002-0629	Security Best Practice: Familiarize Yourself with the Network Quota Protection
Medium	19 Sep 2008	1 Jan 2008	CPAI-2008-222	Secunia Advisory: SA31384	CVE-2008-2939 US-CERT VU#663763	Update Protection against Apache mod_proxy_ftp XSS Vulnerability
Medium	27 Jul 2008	1 Jan 2008	CPAI-2008-104	Secunia Advisory: SA20225	CVE-2006-2444	Preemptive Protection againt Linux Kernel SNMP NAT Netfilter Memory Corruption Vulnerability
Critical	26 Feb 2008	1 Jan 2008	CPAI-2008-204		CVE-2007-2296 CVE-2007-0462 CVE-2007-4672 CVE-2007-4676	Update IPS-1 with a Protection against Apple QuickTime and Apple QuickDraw Vulnerabilities
High	9 Dec 2008	1 Jan 2008	SBP-2008-14	Microsoft Security Bulletin MS08-075	CVE-2008-4268	Workaround for Microsoft Windows Saved Search Remote Code Execution Vulnerability (MS08-075)
High	2 Mar 2008	1 Jan 2008	CPAI-2008-033	http://www.spywareremove.com/removeHDTBar.html http://www.fbmsoftware.com/spyware-net/application/Dealio_Toolbar/ http://www.spywareremove.com/removeEZTracks.html http://www.spywareguide.com/product_show.php?id=3367 http://www.spywareremove.com/removeBaiduBar.html http://www.emsisoft.com/en/malware/?Adware.Win32.Softomate.ag http://research.sunbelt-software.com/threatdisplay.aspx?name=PeoplePal%20Toolbar&threatid=48411		Update Protections against Recent Malware Threats (2-Mar-08)
Medium	30 Apr 2008	1 Jan 2008	CPAI-2008-063	SmartDefense Research Center		Integrity Clientless Security (ICS) Update 3.7.221.0
Medium	16 Jun 2008	1 Jan 2008	CPAI-2008-083	SmartDefense Research Center		Integrity Clientless Security (ICS) Update 3.7.231.0
High	25 May 2008	1 Jan 2008	SBP-2008-07	SmartDefense Research Center		Security Best Practice: Get Yourself Familiar with the Header Rejection Tool
High	8 Apr 2008	1 Jan 2008	CPAI-2008-052	Microsoft Security Bulletin MS08-020	CVE-2008-0087	Preemptive Protection against Microsoft Windows DNS Client Spoofing Vulnerability (MS08-020)
High	31 Oct 2008	1 Jan 2008	CPAI-2008-232	Secunia Advisory: SA29408	CVE-2008-1472	Update Protection against CA Multiple Products ActiveX Control Buffer Overflow Vulnerability
High	7 Nov 2008	1 Jan 2008	CPAI-2008-239	Secunia Advisory: SA32005	CVE-2008-3862	Update Protection against Trend Micro OfficeScan CGI Parsing Buffer Overflow Vulnerability
High	1 Dec 2008	1 Jan 2008	SBP-2008-13	Secunia Advisory: SA29773	CVE-2008-2992	Workaround for Adobe Reader and Acrobat util.printf Stack Buffer Overflow Vulnerability
Low	6 Mar 2008	1 Jan 2008	CPAI-2008-208	SmartDefense Research Center		IPS-1 Protocol and Protocol Subsystems Configuration Changes
Low	27 Feb 2008	1 Jan 2008	CPAI-2008-206	SmartDefense Research Center		IPS-1 TCP Protocol Updates