*** EX RELS 03310 Release *** Total number of signatures: 6010 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 8 rule(s): --------------- 1133394 WEB-CLIENT Microsoft Edge Chakra Array.shift Type Confusion -1.1 (CVE-2016-7201) 1133400 WEB SearchBlox Multiple Authentication Bypass Vulnerabilities -4 (CVE-2015-7919) 1133401 NTP ntp.org Network Time Protocol Windows Daemon getEndptFromIoCtx Denial of Service (CVE-2016-9312) 1133404 EXPLOIT Base64 Data and Content Type Mismatch -1 1160079 MEDIA Hulu access via SSL -3 1160080 MEDIA Hulu access via SSL -4 1160081 MEDIA VEVO media via SSL -1 1160082 MEDIA VEVO media via SSL -2 Modified 5 rule(s): --------------- 1066989 SOCIAL Weibo login via SSL -1 1067691 FILE Dropbox login via SSL -2 1067722 FILE Dropbox access via SSL -1 1069053 MEDIA VEVO access via SSL -2 1133300 WEB-CLIENT Microsoft Edge CVE-2016-7286 Memory Corruption (CVE-2016-7286) Deleted 40 rule(s): --------------- 1051092 EXPLOIT eSignal v7.6 remote buffer overflow (old rule) 1051181 SIP Digium Asterisk Management Interface HTTP Digest Authentication Stack Buffer Overflow (CVE-2012-1184) (old rule) 1053214 MEDIA SopCast media via UDP -1 (old rule) 1053269 MEDIA SopCast login via UDP -1 (old rule) 1053270 MEDIA SopCast media via TCP -2 (old rule) 1053275 MEDIA UUSee media via UDP -2 (old rule) 1053384 MEDIA UUSee media via UDP -1 (old rule) 1053593 MEDIA UUSee media via UDP -4 (old rule) 1053606 MEDIA UUSee media via UDP -5 (old rule) 1053607 MEDIA UUSee media via UDP -6 (old rule) 1053675 MEDIA SopCast login via TCP -1 (old rule) 1053678 MEDIA SopCast media via TCP -1 (old rule) 1056096 WEB Oracle GlassFish Enterprise Server REST Interface Cross Site Request Forgery -1 (CVE-2012-0550) (old rule) 1056120 EXPLOIT NetWeaver Dispatcher Stack Buffer Overflow (CVE-2012-2611) (old rule) 1056121 EXPLOIT SAP NetWeaver DiagTraceHex Denial of Service (CVE-2012-2612) (old rule) 1056131 EXPLOIT EMC Data Protection Advisor Denial of Service (old rule) 1056250 WEB-ACTIVEX IBM Lotus Quickr qp2.cab ActiveX Control Stack Buffer Overflow -1 (CVE-2012-2176) (old rule) 1056317 EXPLOIT Zend Zend Server Java Bridge Remote Code Execution -2 (BID-47060) (old rule) 1056318 WEB Symantec IM Manager Administrator Console Code Injection (old rule) 1056320 EXPLOIT eSignal and eSignal Pro Multiple Vulnerabilites-1 (old rule) 1056330 EXPLOIT HP Data Protector Media Operations Memory Corruption -1 (old rule) 1056400 DHCP ISC DHCP Server DUID Handling Stack Buffer Overflow (CVE-2012-3570) (old rule) 1056403 EXPLOIT HP Operations Agent Performance Component Stack Buffer Overflow (CVE-2012-2020) (old rule) 1056407 WEB-CLIENT Microsoft Internet Explorer MSXML Object Buffer Overflow -4 (CVE-2012-1889) (old rule) 1056409 FILE Oracle Outside In FlashPix Image Processing Heap Buffer Overflow - 2 (CVE-2012-1744) (old rule) 1056412 WEB-ACTIVEX Apple QuickTime Plugin SetLanguage Buffer Overflow (CVE-2012-0666) (old rule) 1056416 EXPLOIT Apple QuickTime TeXML Stack Buffer Overflow - 3 (CVE-2012-0663) (old rule) 1056429 WEB-ACTIVEX Dell Webcam Software ActiveX Control CrazyTalk4Native.dll Stack Buffer Overflow -1 (OSVDB-80205) (old rule) 1056435 WEB HP SiteScope Remote Code Execution (ZDI-12-174) (old rule) 1056441 EXPLOIT Oracle Java Sandbox Breach - 7 (CVE-2012-4681) (old rule) 1060521 MEDIA UUSee media via UDP -3 (old rule) 1063162 MEDIA UUSee access via TCP -1 (old rule) 1064418 MEDIA SopCast login via TCP -2 (old rule) 1064419 MEDIA SopCast media via UDP -2 (old rule) 1065485 MEDIA UUSee media via TCP -1 (old rule) 1066150 MEDIA UUSee login via TCP -1 (old rule) 1066151 MEDIA UUSee media via TCP -2 (old rule) 1066501 MEDIA UUSee media via TCP -3 (old rule) 1068324 MEDIA SopCast access via TCP -1 (old rule) 1068325 MEDIA SopCast access via TCP -2 (old rule)