Update Details
Update #3037 (02/15/2018)
35 new signatures:
| HIGH | VOIP:SIP:CVE-2017-17850-DOS | VOIP: Digium Asterisk PJSIP Contact Header Denial of Service |
| HIGH | HTTP:STC:SCRIPT:ELECTRON-CMD-IN | HTTP: Electron Java Script Command Injection |
| MEDIUM | HTTP:MISC:NETIQ-DIR-TRAVERSAL | HTTP: Micro Focus NetIQ Access Manager Identity Server Directory Traversal |
| HIGH | HTTP:STC:ADOBE:CVE-2017-11308 | HTTP: Adobe Acrobat ImageConversion EMF Integer Overflow |
| HIGH | HTTP:ORACLE:WEB-LOGIC-CMD-INJ | HTTP: Oracle Weblogic Remote Diagnosis Assistant Rda_Tfa_Hrs Command Injection |
| CRITICAL | HTTP:IBM-INFORMIX-OPENADMIN-CE | HTTP: IBM Informix OpenAdmin Tool welcomeService.php Command Execution |
| MEDIUM | HTTP:STC:IE:CVE-2018-0780-MC | HTTP: Microsoft Edge Chakra AsmJSByteCodeGenerator EmitCall Type Confusion |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4911UAF | HTTP: Adobe Reader CVE-2018-4911 Use After Free |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4885RCE | HTTP: Adobe Reader CVE-2018-4885 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4896RCE | HTTP: Adobe Acrobat And Reader CVE-2018-4896 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4897RCE | HTTP: Adobe Acrobat And Reader CVE-2018-4897 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4887RCE | HTTP: Adobe Reader CVE-2018-4887 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4888UAF | HTTP: Adobe Reader CVE-2018-4888 Use After Free |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4892 | HTTP: Adobe Acrobat Reader Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4906OOB | HTTP: Adobe Acrobat And Reader CVE-2018-4906 Out Of Bounds Read |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4889RCE | HTTP: Adobe Reader CVE-2018-4889 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4907OOB | HTTP: Adobe Acrobat And Reader CVE-2018-4907 Out Of Bounds Read |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4908-ID | HTTP: Adobe Acrobat And Reader CVE-2018-4908 Out Of Bounds Read |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4909OOB | HTTP: Adobe Acrobat And Reader CVE-2018-4909 Out Of Bounds Read |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4910RCE | HTTP: Adobe Acrobat And Reader CVE-2018-4910 Arbitrary Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4912OOB | HTTP: Adobe Reader CVE-2018-4912 Out-of-bounds Read |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4913UAF | HTTP: Adobe Acrobat Reader CVE-2018-4913 Use After Free |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4914OOB | HTTP: Adobe Reader CVE-2018-4914 Out-of-bounds Read |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4915OOB | HTTP: Adobe Acrobat Reader CVE-2018-4915 Out-of-bounds Write |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4916OOB | HTTP: Adobe Acrobat Reader CVE-2018-4916 Out-of-bounds Write |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4898RCE | HTTP: Adobe Acrobat And Reader CVE-2018-4898 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4899RCE | HTTP: Adobe Acrobat And Reader CVE-2018-4899 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4900RCE | HTTP: Adobe Acrobat And Reader CVE-2018-4900 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4881RCE | HTTP: Adobe Acrobat And Reader CVE-2018-4881 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4883RCE | HTTP: Adobe Reader CVE-2018-4883 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4893 | HTTP: Adobe Acrobat Reader Out of Bounds Read Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4894 | HTTP: Adobe Reader Out of Bounds Read Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4901RCE | HTTP: Adobe Acorbat Reader CVE-2018-4901 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4903RCE | HTTP: Adobe Acorbat Reader CVE-2018-4903 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2018-4904BOF | HTTP: Adobe Acrobat Reader CVE-2018-4904 Arbitary Code Execution |
2 updated signatures:
| HIGH | SMB:CVE-2017-11885-RCE | SMB: Windows CVE-2017-11885 Remote Code Execution |
| HIGH | HTTP:STC:ADOBE:CVE-2017-11213 | HTTP: Adobe Flash Player CVE-2017-11213 Remote Code Execution |
Details of the signatures included within this bulletin:
VOIP:SIP:CVE-2017-17850-DOS - VOIP: Digium Asterisk PJSIP Contact Header Denial of Service
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Digium Asterisk. A successful attack can result in a denial-of-service condition.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
HTTP:STC:ADOBE:CVE-2017-11213 - HTTP: Adobe Flash Player CVE-2017-11213 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Flash Player. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2017-11213
- bugtraq: 101837
Affected Products:
- Redhat enterprise_linux_workstation 6.0
- Redhat enterprise_linux_desktop 6.0
- Adobe flash_player 27.0.0.183
- Redhat enterprise_linux_server 6.0
HTTP:STC:SCRIPT:ELECTRON-CMD-IN - HTTP: Electron Java Script Command Injection
Severity: HIGH
Description:
This signature detects attempts to exploit a known command Injection vulnerability in Electron. It is due to application compiled with electron improperly validating user supplied inputs.A remote attacker can exploit this by enticing a target user to open a malicious link. In a successful attack could result in execution of arbitrary commands under security context of the user
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- url: https://electronjs.org/blog/protocol-handler-fix
- bugtraq: 102796
- cve: CVE-2018-1000006
HTTP:MISC:NETIQ-DIR-TRAVERSAL - HTTP: Micro Focus NetIQ Access Manager Identity Server Directory Traversal
Severity: MEDIUM
Description:
This signature detects attempts to exploit a known vulnerability against Micro Focus NetIQ Access manager Identity Server.A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target server. Successful exploitation results in the disclosure of arbitrary file contents accessible by the target process.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, isg-3.0.0, idp-5.1.110170603, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, srx-17.4, isg-3.1.134269, vsrx-15.1
References:
- cve: CVE-2017-14803
- url: http://www.zerodayinitiative.com/advisories/zdi-18-131/
- url: https://www.novell.com/support/kb/doc.php?id=7022443
HTTP:STC:ADOBE:CVE-2017-11308 - HTTP: Adobe Acrobat ImageConversion EMF Integer Overflow
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Systems Acrobat reader. A successful attack can lead to a Integer overflow and arbitrary remote code execution within the security context of the user
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2017-11308
- url: https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
- url: https://msdn.microsoft.com/en-us/library/cc230972.aspx
HTTP:ORACLE:WEB-LOGIC-CMD-INJ - HTTP: Oracle Weblogic Remote Diagnosis Assistant Rda_Tfa_Hrs Command Injection
Severity: HIGH
Description:
This signature detects attempts to exploit a known Command Injection vulnerability in Oracle Weblogic RDA. It is due to a failure on the part of the application to properly parse input supplied. Successful exploitation could lead to arbitrary command execution on the target server with privileges of the Administrator user.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, isg-3.0.0, idp-5.1.110170603, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, srx-17.4, isg-3.1.134269, vsrx-15.1
References:
HTTP:IBM-INFORMIX-OPENADMIN-CE - HTTP: IBM Informix OpenAdmin Tool welcomeService.php Command Execution
Severity: CRITICAL
Description:
This signature detects attempts to exploit a known vulnerability in the welcomeService.php script of IBM Informix OpenAdmin Tool, packaged as part of Dynamic Server. Successful exploitation could result in code execution under the security context of SYSTEM.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2017-1092
Affected Products:
- Ibm informix_open_admin_tool 11.5
- Ibm informix_open_admin_tool 11.7
- Ibm informix_open_admin_tool 12.1
HTTP:STC:IE:CVE-2018-0780-MC - HTTP: Microsoft Edge Chakra AsmJSByteCodeGenerator EmitCall Type Confusion
Severity: MEDIUM
Description:
This signature detects a Web page containing specific JavaScript code. This code can cause type confusion within Microsoft Edge Chakra. A successful exploitation would allow the attacker to gain sensitive information.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- bugtraq: 102389
- url: https://bugs.chromium.org/p/project-zero/issues/detail?id=1433
- url: https://cwe.mitre.org/data/definitions/843.html
- cve: CVE-2018-0780
HTTP:STC:ADOBE:CVE-2018-4911UAF - HTTP: Adobe Reader CVE-2018-4911 Use After Free
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2018-4911
HTTP:STC:ADOBE:CVE-2018-4885RCE - HTTP: Adobe Reader CVE-2018-4885 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4885
HTTP:STC:ADOBE:CVE-2018-4896RCE - HTTP: Adobe Acrobat And Reader CVE-2018-4896 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- bugtraq: 102996
- cve: CVE-2018-4896
HTTP:STC:ADOBE:CVE-2018-4897RCE - HTTP: Adobe Acrobat And Reader CVE-2018-4897 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- bugtraq: 102996
- cve: CVE-2018-4897
HTTP:STC:ADOBE:CVE-2018-4887RCE - HTTP: Adobe Reader CVE-2018-4887 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4887
HTTP:STC:ADOBE:CVE-2018-4888UAF - HTTP: Adobe Reader CVE-2018-4888 Use After Free
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2018-4888
HTTP:STC:ADOBE:CVE-2018-4892 - HTTP: Adobe Acrobat Reader Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2018-4892
- bugtraq: 102995
HTTP:STC:ADOBE:CVE-2018-4906OOB - HTTP: Adobe Acrobat And Reader CVE-2018-4906 Out Of Bounds Read
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4906
HTTP:STC:ADOBE:CVE-2018-4889RCE - HTTP: Adobe Reader CVE-2018-4889 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4889
HTTP:STC:ADOBE:CVE-2018-4907OOB - HTTP: Adobe Acrobat And Reader CVE-2018-4907 Out Of Bounds Read
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4907
HTTP:STC:ADOBE:CVE-2018-4908-ID - HTTP: Adobe Acrobat And Reader CVE-2018-4908 Out Of Bounds Read
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, isg-3.0.0, idp-5.1.110170603, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, srx-17.4, isg-3.1.134269, vsrx-15.1
References:
- cve: CVE-2018-4908
HTTP:STC:ADOBE:CVE-2018-4909OOB - HTTP: Adobe Acrobat And Reader CVE-2018-4909 Out Of Bounds Read
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4909
HTTP:STC:ADOBE:CVE-2018-4910RCE - HTTP: Adobe Acrobat And Reader CVE-2018-4910 Arbitrary Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Arbitrary Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2018-4910
HTTP:STC:ADOBE:CVE-2018-4912OOB - HTTP: Adobe Reader CVE-2018-4912 Out-of-bounds Read
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4912
HTTP:STC:ADOBE:CVE-2018-4913UAF - HTTP: Adobe Acrobat Reader CVE-2018-4913 Use After Free
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2018-4913
HTTP:STC:ADOBE:CVE-2018-4914OOB - HTTP: Adobe Reader CVE-2018-4914 Out-of-bounds Read
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4914
HTTP:STC:ADOBE:CVE-2018-4915OOB - HTTP: Adobe Acrobat Reader CVE-2018-4915 Out-of-bounds Write
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2018-4915
HTTP:STC:ADOBE:CVE-2018-4916OOB - HTTP: Adobe Acrobat Reader CVE-2018-4916 Out-of-bounds Write
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4916
HTTP:STC:ADOBE:CVE-2018-4898RCE - HTTP: Adobe Acrobat And Reader CVE-2018-4898 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- bugtraq: 102996
- cve: CVE-2018-4898
HTTP:STC:ADOBE:CVE-2018-4899RCE - HTTP: Adobe Acrobat And Reader CVE-2018-4899 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- bugtraq: 102996
- cve: CVE-2018-4899
HTTP:STC:ADOBE:CVE-2018-4900RCE - HTTP: Adobe Acrobat And Reader CVE-2018-4900 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- bugtraq: 102996
- cve: CVE-2018-4900
HTTP:STC:ADOBE:CVE-2018-4881RCE - HTTP: Adobe Acrobat And Reader CVE-2018-4881 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4881
HTTP:STC:ADOBE:CVE-2018-4883RCE - HTTP: Adobe Reader CVE-2018-4883 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, idp-5.0.0, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.5.141818, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, isg-3.0.0, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4883
HTTP:STC:ADOBE:CVE-2018-4893 - HTTP: Adobe Acrobat Reader Out of Bounds Read Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, isg-3.0.0, idp-5.1.110170603, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, srx-17.4, isg-3.1.134269, vsrx-15.1
References:
- bugtraq: 102996
- cve: CVE-2018-4893
HTTP:STC:ADOBE:CVE-2018-4894 - HTTP: Adobe Reader Out of Bounds Read Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader.A successful attack can lead to Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, isg-3.0.0, idp-5.1.110170603, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, srx-17.4, isg-3.1.134269, vsrx-15.1
References:
- bugtraq: 102996
- cve: CVE-2018-4894
HTTP:STC:ADOBE:CVE-2018-4901RCE - HTTP: Adobe Acorbat Reader CVE-2018-4901 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitrary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, mx-11.4, idp-4.1.0, mx-16.1, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, j-series-9.5, srx-12.1, srx-branch-12.1, vsrx-12.1, vsrx-15.1
References:
- cve: CVE-2018-4901
HTTP:STC:ADOBE:CVE-2018-4903RCE - HTTP: Adobe Acorbat Reader CVE-2018-4903 Remote Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to remote code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4903
HTTP:STC:ADOBE:CVE-2018-4904BOF - HTTP: Adobe Acrobat Reader CVE-2018-4904 Arbitary Code Execution
Severity: HIGH
Description:
This signature detects attempts to exploit a known vulnerability against Adobe Reader. A successful attack can lead to arbitary code execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2018-4904
SMB:CVE-2017-11885-RCE - SMB: Windows CVE-2017-11885 Remote Code Execution
Severity: HIGH
Description:
Signature attempts to capture An Arbitrary Pointer Dereference vulnerability in Windows systems. Successful exploitation of this vulnerability can achieve Remote Code Execution.
Supported On:
isg-3.5.141652, idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, idp-5.0.0, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, srx-17.4, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2017-11885