Snort mailing list archives
Snort Subscriber Rules Update 2016-07-12
From: Research <research () sourcefire com>
Date: Tue, 12 Jul 2016 20:45:40 GMT
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Talos Snort Subscriber Rules Update Synopsis: Talos is aware of vulnerabilities affecting products from Microsoft Corporation. Details: Microsoft Security Bulletin MS16-084: Microsoft Internet Explorer suffers from programming errors that may lead to remote code execution. Previously released rules will detect attacks targeting these vulnerabilities and have been updated with the appropriate reference information. They are also included in this release and are identified with GID 1, SIDs 38112 through 38113. New rules to detect attacks targeting these vulnerabilities are also included in this release and are identified with GID 1, SIDs 39484 through 39487, 39491 through 39492, 39499 through 39500, and 39510 through 39515. Microsoft Security Bulletin MS16-085: A coding deficiency exists in Microsoft Edge that may lead to an escalation of privilege. Rules to detect attacks targeting these vulnerabilities are included in this release and are identified with GID 1, SIDs 39493 through 39494 and 39505 through 39507. Microsoft Security Bulletin MS16-088: A coding deficiency exists in Microsoft Office that may lead to remove code execution. Previously released rules will detect attacks targeting these vulnerabilities and have been updated with the appropriate reference information. They are also included in this release and are identified with GID 1, SIDs 16234, 18545, 18548, and 25631. New rules to detect attacks targeting these vulnerabilities are also included in this release and are identified with GID 1, SIDs 39503 through 39504 and 39518 through 39525. Microsoft Security Bulletin MS16-090: A coding deficiency exists in Microsoft Kernel-Mode drivers that may lead to an escalation of privilege. Rules to detect attacks targeting these vulnerabilities are included in this release and are identified with GID 1, SIDs 39478 through 39483, 39495 through 39496, 39508 through 39509, and 39516 through 39517. Talos has added and modified multiple rules in the browser-ie, file-office, file-pdf, indicator-obfuscation, malware-cnc and policy-other rule sets to provide coverage for emerging threats from these technologies. For a complete list of new and modified rules please see: https://www.snort.org/advisories -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFXhVb0s9U0LCYEKaARAtJbAJ9TBahK/477yovODr4o/nU4D5KUoQCgo6o5 mUe7Byqc3IcfZWSrtucmNkE= =852X -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports.http://sdm.link/zohodev2dev _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Snort Subscriber Rules Update 2016-07-12 Research (Jul 13)