Update Details
Update #2877 (04/27/2017)
EOL Announcement (January 3, 2017): End-of-Life Notification for Juniper Networks IDP/AppID Signature Releases on EOL products. Please see TSB17019 for more information.
2 updated signatures:
| HIGH | HTTP:STC:IE:CVE-2017-0208-IOV | HTTP: Microsoft Edge CVE-2017-0208 Integer Overflow |
| MEDIUM | HTTP:STC:ACTIVEX:MITSUBISHI | HTTP: Mitsubishi EZPcAut260 Unsafe ActiveX Control |
Details of the signatures included within this bulletin:
HTTP:STC:IE:CVE-2017-0208-IOV - HTTP: Microsoft Edge CVE-2017-0208 Integer Overflow
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability in the Microsoft Edge. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the user.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.1.110110719, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, idp-5.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, isg-3.4.139899, j-series-9.5, srx-12.1, srx-branch-12.1, idp-4.2.110100823, idp-5.0.110130325, mx-11.4, isg-3.4.140032, idp-4.2.110101203, vsrx-12.1, idp-5.1.0, idp-5.0.110121210, vsrx-15.1, idp-4.1.110110609, isg-3.5.141597, idp-5.1.110160603
References:
- cve: CVE-2017-0208
HTTP:STC:ACTIVEX:MITSUBISHI - HTTP: Mitsubishi EZPcAut260 Unsafe ActiveX Control
Severity: MEDIUM
Description:
This signature detects attempts to use unsafe ActiveX controls in Mitsubishi. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Supported On:
isg-3.5.141652, idp-5.1.110161014, DI-Client, DI-Worm, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, idp-5.0.0, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, vsrx-15.1, isg-3.5.141597, idp-5.1.110160603
References:
- cve: CVE-2014-1641