IPS Security Update - October 24th, 2017

[Danny]

October 24th, 2017

Package No. 635177111 & 634177111

New IPS Protections

				R7x Profile	R80 Profiles
Severity			Protection Name	Recommended	Basic	Optimized	Strict
			Microsoft Office WordPerfect Document Converter Heap-based Buffer Overflow (CVE-2017-8744)
			Trend Micro Mobile Security Enterprise eas_agent_unregister slink_id SQL Injection (CVE-2017-14078)
			Digium Asterisk app_minivm Caller-ID Command Execution (CVE-2017-14100)
			Oracle Java SE MixerSequencer Object GM_Song Remote Code Execution (CVE-2010-0842)
			Schneider Electric U.motion Builder nfcserver.php SQL Injection (CVE-2017-7973)
			Advantech WebAccess rmTemplate.aspx SQL Injection (CVE-2017-12710)
			Atlassian FishEye and Crucible mostActiveCommitters Information Disclosure (CVE-2017-9512)
			HPE Intelligent Management Center getSelInsBean Expression Language Injection (CVE-2017-12490)
			Microsoft Windows Search Information Disclosure (CVE-2017-8544)
			Microsoft Windows XXE Information Disclosure (CVE-2017-8710)

Updated Protections

	R7x Profile	R80 Profiles
Protection Name	Recommended	Basic	Optimized	Strict
Adobe Acrobat and Reader Use After Free (APSB17-24; CVE-2017-11256)
Adobe Flash Player Integer Overflow Remote Code Execution (APSB16-01; CVE-2015-8651)
Adobe Flash Player Remote Code Execution (APSA16-01; CVE-2016-1019)
Cisco IP Phone SIP INVITE Message Denial of Service (CVE-2007-1542)
HPE Intelligent Management Center dbman RestoreDBase Command Injection (CVE-2017-5817; CVE-2017-5819)
Joomla LDAP Information Disclosure (CVE-2017-14596)
Linux EternalRed Samba Remote Code Execution (CVE-2017-7494)
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8671)
Microsoft Internet Explorer Jscript9 Memory Corruption (MS15-065; CVE-2015-2419)
Microsoft Windows Media Player RTSP Use after Free Code Execution (MS10-075; CVE-2010-3225)
Novell eDirectory NCP Stack Buffer Overflow (CVE-2012-0432)
SQL Servers Unauthorized Commands SQL Injection (CVE-2014-3704)
Web Login Form Password Brute Force Attempt
WordPress Display Widgets Plugin Spammers Backdoor

General Notifications

Tags of over 4000 protections were adjusted to better define protections' vendors and products, resulting with over 800 additional protections in R80 Optimized profile

Threat wiki

App wiki

IPS Advisories

Copyright © Check Point Software Technologies LTD.