*** NK8 RELS 3318 Release *** Total number of signatures: 3192 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 13 rule(s): --------------- 1133503 WEB-CLIENT Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-0010) 1133506 WEB-CLIENT Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-00141) 1133509 WEB-CLIENT JavaScript Heap Exploitation -4 1133510 WEB-CLIENT JavaScript Heap Exploitation -5 1133511 WEB-CLIENT JavaScript Heap Exploitation -6 1133512 WEB-CLIENT JavaScript Heap Exploitation -7 1133516 WEB Dell SonicWALL GMS-Analyzer license.jsp Information Disclosure 1133517 EXPLOIT Generic HTML Threat -30 1133518 WEB-CLIENT Microsoft Edge document.domain Same Origin Policy Bypass -1 (CVE-2017-0002) 1133520 SMB Microsoft Windows LSASS Authentication Denial of Service -1 (CVE-2017-0004) 1133524 WEB-CLIENT Browser WebKit Exploit Remote code execution -1 (CVE-2016-4657) 1133525 WEB-CLIENT Browser WebKit Exploit Remote code execution -2 (CVE-2016-4657) 1160140 P2P BT-BitTorrent transfer via UDP -7 Modified 6 rule(s): --------------- 1055432 WEB Apache Struts 2 OGNL Script Injection -1 1056234 WEB PHP Arbitrary Code Injection -5.a 1056488 WEB PHP Arbitrary Code Injection -6.a 1056706 WEB Novell ZENworks Configuration Management Multiple Directory Traversals 1132197 WEB IBM WebSphere Application Server Commons-Collections Library Remote Code Execution -1 (CVE-2015-7450) 1133458 WEB-CLIENT JavaScript Heap Exploitation -3 Deleted 0 rule(s): ---------------