Snort mailing list archives

Sourcefire VRT Certified Snort Rules Update 2014-12-23


From: Research <research () sourcefire com>
Date: Tue, 23 Dec 2014 17:29:26 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
The VRT is aware of a vulnerability affecting libpng.

Details:
Vulnerability in libpng:
A coding deficiency exists in the libpng image library that may lead to
remote code execution.

A previously released rule will detect attacks targeting this
vulnerability and has been updated with the appropriate reference
information. It is included in this release and is identified with GID
1, SID 3132.
A new rule to detect this vulnerability is also included in this
release and is identified by GID 1, SID 32889.

The VRT has also added and modified multiple rules in the blacklist,
exploit-kit, file-flash, file-image, file-other, file-pdf,
indicator-compromise, malware-cnc and server-webapp rule sets to
provide coverage for emerging threats from these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFUmaZNQLjqI2QiHVMRAl2tAJoCu8R96fjc7+mVZq25N2nfyzhpMACgn9tr
yGgAD7MpccTdkqsRJNkxphg=
=KqfR
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!


Current thread: