RE: WMF and IPS products?

["Murat Korkmaz" <m.korkmaz () determina com>]

Hi Sam,

I am not sure what you are referring to with "protecting from
downloading malicious WMF content". The most proper way to do it would
be through signature based systems and it is known fact that all the
signature based systems were bypassed during this and other similar
vulnerabilities.

You will see that Determina VPS Memory Firewall technology provides
zero-day protection for this vulnerability, preventing the end systems
from running any single instruction of the malicious code on the
affected system.

Please check out our web site at www.determina.com for more technical
info and product details

Thanks,
Murat

-----Original Message-----
From: Sam Evans [mailto:wintrmte () gmail com] 
Sent: Wednesday, January 04, 2006 2:43 PM
To: focus-ids () securityfocus com
Subject: WMF and IPS products?

I am curious if any of the major IPS vendors are able to successfully
protect workstations from downloading malicious WMF content?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------