ruleUpdate
16-025 (06 septembre 2016)
Publish Date: 06 septembre 2016
Description
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
RealNetworks Helix Server
1004120* - RealNetworks Helix Server NTLM Authentication Heap Buffer Overflow Vulnerability (CVE-2010-1318)
Suspicious Client Application Activity
1007907 - Cisco ASA Memory Corruption Vulnerability (CVE-2016-6366)
Web Application Ruby Based
1005331* - Ruby On Rails XML Processor YAML Deserialization DoS
Web Client Common
1007630* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB16-14) - 5
1007590* - Adobe Flash Player DLL Hijacking Vulnerability Over WebDAV (CVE-2016-1014)
1007676* - Adobe Flash Player Heap Overflow Vulnerability (CVE-2016-4136)
1007452 - Adobe Flash Player Use After Free Vulnerability (CVE-2016-0959)
1003742* - FFmpeg OGV File Format Double Free Memory Corruption
1003747* - FFmpeg vmd_read_header Integer Overflow
1007918 - Fortinet FortiGate Cookie Parser Buffer Overflow Vulnerability (CVE-2016-6909)
1006532* - Identified Malicious Adobe Flash SWF File - 1
1007919 - Microsoft .NET Framework And Silverlight Array Offset Vulnerability (CVE-2011-0664)
1007911 - Microsoft .NET Framework XAML Browser Applications Stack Corruption (CVE-2010-3958)
1007882* - Microsoft Windows Graphics Component Remote Code Execution Vulnerability (CVE-2016-3303)
1007558* - Microsoft Windows OLE Remote Code Execution Vulnerability (CVE-2016-0153)
Web Server Miscellaneous
1005516* - RedHat JBoss Enterprise Application Platform Block Access To Status Servlet
Windows Services RPC Client DCERPC
1007538* - Windows Client Port Mapper Decoder
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
RealNetworks Helix Server
1004120* - RealNetworks Helix Server NTLM Authentication Heap Buffer Overflow Vulnerability (CVE-2010-1318)
Suspicious Client Application Activity
1007907 - Cisco ASA Memory Corruption Vulnerability (CVE-2016-6366)
Web Application Ruby Based
1005331* - Ruby On Rails XML Processor YAML Deserialization DoS
Web Client Common
1007630* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB16-14) - 5
1007590* - Adobe Flash Player DLL Hijacking Vulnerability Over WebDAV (CVE-2016-1014)
1007676* - Adobe Flash Player Heap Overflow Vulnerability (CVE-2016-4136)
1007452 - Adobe Flash Player Use After Free Vulnerability (CVE-2016-0959)
1003742* - FFmpeg OGV File Format Double Free Memory Corruption
1003747* - FFmpeg vmd_read_header Integer Overflow
1007918 - Fortinet FortiGate Cookie Parser Buffer Overflow Vulnerability (CVE-2016-6909)
1006532* - Identified Malicious Adobe Flash SWF File - 1
1007919 - Microsoft .NET Framework And Silverlight Array Offset Vulnerability (CVE-2011-0664)
1007911 - Microsoft .NET Framework XAML Browser Applications Stack Corruption (CVE-2010-3958)
1007882* - Microsoft Windows Graphics Component Remote Code Execution Vulnerability (CVE-2016-3303)
1007558* - Microsoft Windows OLE Remote Code Execution Vulnerability (CVE-2016-0153)
Web Server Miscellaneous
1005516* - RedHat JBoss Enterprise Application Platform Block Access To Status Servlet
Windows Services RPC Client DCERPC
1007538* - Windows Client Port Mapper Decoder
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.