-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Sourcefire VRT Certified Snort Rules Update
Synopsis:
The Sourcefire VRT has continued research into multiple vulnerabilities
affecting Microsoft products and has updated a number of rules as a result of
this ongoing work. The VRT is also aware of a vulnerability affecting the
iPhone from Apple.
Details:
Apple iPhone Safari (MobileSafari) CVE-2007-3944:
Safari for the iPhone suffers from a programming error that may allow an
attacker to execute code on an affected system.
A rule to detect attacks targeting this vulnerability is included in this
release and is identified as SID 12286.
Microsoft Security Bulletin MS07-042:
Microsoft XML Core Services suffers from programming errors to the extent that
it is possible for a remote attacker to execute code on an affected system. It
may be possible for the attacker to take complete control of the target system.
A rule to detect attacks targeting this vulnerability has been updated and is
identified as SID 12279.
Microsoft Security Bulletin MS07-043:
Programming errors affecting Object Linking and Embedding (OLE) Automation as
used in various Microsoft products may allow an attacker to execute code on a
vulnerable system.
A rule to detect attacks targeting this vulnerability has been updated and is
identified as SID 12279.
Microsoft Security Bulletin MS07-044:
Microsoft Excel may allow an attacker to execute code via a Workspace index
value which can be manipulated to cause a memory corruption on an affected
system.
A rule to detect attacks targeting this vulnerability has been updated and is
identified as SID 12284.
For a complete list of new and modified rules please see:
http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2007-08-21.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)
iD8DBQFGy1ykoFlcG+k7cPwRAh3OAKC7tlbO2Ar/MeZrT0d5LF8WE2tQTwCgi1u4
l53bjyxnyi9rjTLab5XqFiI=
=TyBJ
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
