*** EX RELS 03345 Release *** Total number of signatures: 6048 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 16 rule(s): --------------- 1134014 WEB-CLIENT Microsoft Internet Explorer and Edge CVE-2017-0009 Information Disclosure Vulnerability (CVE-2017-0009) 1134015 WEB-CLIENT Microsoft Edge Array Out of Bounds Memory Corruption (CVE-2017-0046) 1134016 WEB-CLIENT Microsoft Edge Malformed UTF-8 Decode Arbitrary (CVE-2017-0131) 1134017 WEB Apache Tomcat 7.0.0 to 7.0.79 jsp File Upload Vulnerability (CVE-2017-12615) 1134018 WEB-CLIENT Microsoft Edge Chakra Eval Integer Overflow -1 (CVE-2017-8641) 1134019 WEB Muieblackcat Scanner 1134020 WEB Apache HTTP OPTIONS Memory Leak (CVE-2017-9798) 1134024 WEB Disk Pulse Enterprise GET Buffer Overflow (EDB-42560) 1134025 WEB HPE Intelligent Management Center wmiConfigContent Expression Language Injection (CVE-2017-12526) 1134026 WEB Trend Micro OfficeScan Proxy.php Command Injection (CVE-2017-11394) 1134027 EXPLOIT Trend Micro Control Manager cmdHandlerLicenseManager SQL Injection (CVE-2017-11384) 1160627 IM Trillian access via SSL -1 1160634 IM AIM/ICQ/iIM access via SSL -5 1160635 IM Mail.ru login via SSL -1 1160636 MEDIA YouTube access via UDP -5 1160637 MEDIA Youku.com access via TCP -4 Modified 7 rule(s): --------------- 1055396 WEB Cross-site Scripting -9 1057463 SCADA ScadaTEC ScadaPhone Stack Buffer Overflow -2 (CVE-2011-4535) 1060401 TCP port 387 traffic (eg. Appletalk Update-Based Routing Pro.) 1066106 MEDIA Youku.com access via TCP -2 1068827 IM IPMSG access via UDP -1 1068939 IM IRC login via TCP -3 1160499 MEDIA Netflix access via SSL -7 Deleted 0 rule(s): ---------------