17-030 (June 27, 2017)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Apache OpenMeetings
1008267 - Apache OpenMeetings ZIP File Path Traversal Vulnerability (CVE-2016-0784)


DCERPC Services
1008432 - Microsoft Windows SMB Information Disclosure Vulnerability (CVE-2017-0267)
1008468 - Microsoft Windows SMBv1 Information Disclosure Vulnerability (CVE-2017-0271)


Unix Samba
1008420* - Samba Shared Library Remote Code Execution Vulnerability (CVE-2017-7494)


Web Application Common
1008383 - ImageMagick Heap Buffer Overflow Vulnerability (CVE-2016-9556)
1008388 - ImageMagick Use After Free Denial Of Service Vulnerability (CVE-2016-7906)


Web Application Tomcat
1006107* - Apache Tomcat Chunk Request Remote Denial Of Service Vulnerability


Web Client Common
1008304* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB17-11) - 2
1008406 - Adobe Reader DC Graphics State Dictionary Double Free Remote Code Execution Vulnerability (CVE-2016-1111)
1008400 - Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
1008403 - Foxit Reader ExportData Restrictions Bypass Remote Code Execution Vulnerability
1008402 - Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability
1008405 - Foxit Reader JPEG Parsing Out Of Bounds Read Information Disclosure Vulnerability
1008413 - Foxit Reader JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
1008395 - Foxit Reader JPEG2000 Parsing Out Of Bounds Write Remote Code Execution Vulnerability
1008396 - Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
1008414 - Foxit Reader Pattern Uninitialized Pointer Remote Code Execution Vulnerability
1008386 - Foxit Reader TIFF Parsing Out Of Bounds Write Remote Code Execution Vulnerability
1008384 - ImageMagick Heap Buffer Overflow Vulnerability (CVE-2016-9556) - 1
1008389 - ImageMagick Use After Free Denial Of Service Vulnerability (CVE-2016-7906) - 1
1008381 - Microsoft Windows Media Format ASF Parsing Vulnerability (CVE-2006-4702)


Web Client Internet Explorer/Edge
1008399 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-0093)
1008209* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2017-0130)
1008374 - Microsoft XML Memory Corruption Vulnerability (CVE-2007-0099)


Integrity Monitoring Rules:

1002770* - Unix - File Attributes Changes In /usr/bin And /usr/sbin Locations
1008464 - Unix - File Attributes Changes In /usr/etc, /usr/lib, /usr/lib64, /usr/libexec And /usr/local Locations


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.