IPS Security Update - November 14th, 2017

[Danny]

November 14th, 2017

Package No. 635177616 & 634177616

New IPS Protections

				R7x Profile	R80 Profiles
Severity			Protection Name	Recommended	Basic	Optimized	Strict
			Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36; CVE-2017-16381)
			Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36; CVE-2017-16385)
			Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36; CVE-2017-16392)
			Adobe Acrobat and Reader Buffer Over-read (APSB17-36; CVE-2017-16363)
			Adobe Acrobat and Reader Buffer Over-read (APSB17-36; CVE-2017-16365)
			Adobe Acrobat and Reader Buffer Over-read (APSB17-36; CVE-2017-16374)
			Adobe Acrobat and Reader Buffer Over-read (APSB17-36; CVE-2017-16384)
			Adobe Acrobat and Reader Buffer Over-read (APSB17-36; CVE-2017-16386)
			Adobe Acrobat and Reader Buffer Over-read (APSB17-36; CVE-2017-16387)
			Adobe Acrobat and Reader Buffer Overflow / Underflow (APSB17-36; CVE-2017-16368)
			Adobe Acrobat and Reader Heap Overflow (APSB17-36; CVE-2017-16383)
			Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36; CVE-2017-16391)
			Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36; CVE-2017-16410)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16362)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16370)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16382)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16394)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16399)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16400)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16401)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16402)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16403)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16404)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16405)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16408)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16409)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16412)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16414)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16417)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16418)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16420)
			Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36; CVE-2017-16407)
			Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36; CVE-2017-16413)
			Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36; CVE-2017-16415)
			Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36; CVE-2017-16416)
			Adobe Acrobat and Reader Security Bypass (APSB17-36; CVE-2017-16361)
			Adobe Acrobat and Reader Security Bypass (APSB17-36; CVE-2017-16366)
			Adobe Acrobat and Reader Security Bypass (APSB17-36; CVE-2017-16369)
			Adobe Acrobat and Reader StackExhaustion (APSB17-36; CVE-2017-16419)
			Adobe Acrobat and Reader Type Confusion (APSB17-36; CVE-2017-16406)
			Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36; CVE-2017-16364)
			Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36; CVE-2017-16371)
			Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36; CVE-2017-16372)
			Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36; CVE-2017-16373)
			Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36; CVE-2017-16375)
			Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36; CVE-2017-16411)
			Adobe Acrobat and Reader Use After Free (APSB17-36; CVE-2017-16360)
			Adobe Acrobat and Reader Use After Free (APSB17-36; CVE-2017-16388)
			Adobe Acrobat and Reader Use After Free (APSB17-36; CVE-2017-16389)
			Adobe Acrobat and Reader Use After Free (APSB17-36; CVE-2017-16390)
			Adobe Acrobat and Reader Use After Free (APSB17-36; CVE-2017-16393)
			Adobe Acrobat and Reader Use After Free (APSB17-36; CVE-2017-16398)
			Adobe Flash Player Integer Overflow (APSB17-33; CVE-2017-11213)
			Adobe Flash Player Out-of-bounds Read (APSB17-33; CVE-2017-3112)
			Adobe Flash Player Out-of-bounds Read (APSB17-33; CVE-2017-3114)
			Adobe Flash Player Use After Free (APSB17-33; CVE-2017-11215)
			Adobe Flash Player Use After Free (APSB17-33; CVE-2017-11225)
			Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11837)
			Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11843)
			Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11846)
			Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11858)
			Microsoft Edge Memory Corruption (CVE-2017-11845)
			Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11840)
			Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11841)
	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11861)
	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11873)
	Microsoft Internet Explorer Memory Corruption (CVE-2017-11855)
	Microsoft Internet Explorer Memory Corruption (CVE-2017-11856)
	Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-11869)
			Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36; CVE-2017-16395)
			Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36; CVE-2017-16396)
			Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36; CVE-2017-16397)
			Adobe Acrobat and Reader Security Bypass (APSB17-36; CVE-2017-16380)
			Adobe Acrobat and Reader Type Confusion (APSB17-36; CVE-2017-16367)
			Microsoft Browser Scripting Engine Information Disclosure (CVE-2017-11791)
			Microsoft Excel Memory Corruption (CVE-2017-11878)
			Microsoft Windows Kernel Elevation of Privilege (CVE-2017-11847)
			Microsoft Word Memory Corruption (CVE-2017-11854)
			Cisco Prime Collaboration Provisioning logconfigtracer.jsp Arbitrary File Deletion (CVE-2017-6637)
			IBM Lotus Notes encodeURI DOS (CVE-2017-1129)
			Microsoft Windows SMB Server SMBv1 Information Disclosure (CVE-2017-11815)
			Samba SMB1 Information Disclosure (CVE-2017-12163)
			ZKTeco ZKTime Web Cross Site Request Forgery (CVE-2017-13129)

Updated Protections

	R7x Profile	R80 Profiles
Protection Name	Recommended	Basic	Optimized	Strict
Adobe Acrobat and Reader Memory Corruption (APSB17-24; CVE-2017-11263)
Command Injection Over HTTP
DNS Client Resolver glibc Buffer Overflow (CVE-2015-7547)
Microsoft Internet Explorer SLayoutRun Use After Free - High Confidence (MS13-009; CVE-2013-0025)

Threat wiki

App wiki

IPS Advisories

Copyright © Check Point Software Technologies LTD.