16-027 (2016年9月20日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Database Oracle
1004128* - Oracle Database Server DBMS_CDC_PUBLISH Multiple Procedure SQL Injection


Microsoft Office
1007736* - Microsoft Office Memory Corruption Vulnerability (CVE-2016-3284)


Web Application PHP Based
1007948* - Drupal RESTWS Module Page Callback Remote Code Execution Vulnerability


Web Client Common
1007954 - Adobe Flash Player Memory Corruption Vulnerability (APSB16-29)
1007953 - Adobe Flash Player Multiple Security Vulnerabilities (APSB16-29)
1007956 - Adobe Flash Player Security Bypass Vulnerability (APSB16-29)
1007952 - Adobe Flash Player Security Bypass Vulnerability (APSB16-29) - 1
1007757* - Adobe Flash Player Use After Free Vulnerability (CVE-2016-4226)


Web Client Internet Explorer/Edge
1007879* - Microsoft Internet Explorer And Edge Information Disclosure Vulnerability (CVE-2016-3327)


Web Server Apache
1006027* - Apache HTTP Server Denial Of Service Vulnerability (CVE-2014-0098)


Web Server Oracle
1005315* - Oracle Database Client System Analyzer Remote Code Execution Vulnerability


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.