Re: WMF and IPS products?

["David W. Goodrum" <dgoodrum () nfr com>]

Here's an article written in Computer World, about NFR's ability to 
protect against the WMF exploit. 

http://computerworld.com.sg/ShowPage.aspx?pagetype=2&articleid=3265&pubid=3&issueid=78 
<http://computerworld.com.sg/ShowPage.aspx?pagetype=2&articleid=3265&pubid=3&issueid=78>

Customers running our badfiles package have been protected since 
November I believe.

thanks,

dave

Haseeb Abdali wrote:

> Cisco claims that its Cisco Security Agent (CSA) can be used for WMF 
> protection. Specifically CSA version 4.0.3.736 and above is protected.
>
> Haseeb
> ----- Original Message ----- From: "Sam Evans" <wintrmte () gmail com>
> To: <focus-ids () securityfocus com>
> Sent: Wednesday, January 04, 2006 4:43 PM
> Subject: WMF and IPS products?
>
>
> > I am curious if any of the major IPS vendors are able to successfully
> > protect workstations from downloading malicious WMF content?
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from 
> CORE IMPACT.
> Go to 
> http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to 
> learn more.
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------