*** EX RELS 03360 Release *** Total number of signatures: 6036 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 8 rule(s): --------------- 1133370 WEB PHP Arbitrary Code Injection -1.x 1134329 WEB Synology Photo Station Arbitrary File Upload (CVE-2017-11151) 1134336 WEB Oracle Java Web Start Launch Command-Line Injection -3 (CVE-2010-1423) 1134338 FILE GraphicsMagic PNG Use After Free (CVE-2017-14103) 1134342 FILE Adobe Acrobat ImageConversion EMF EmfPlus Heap-based Buffer Overflow (CVE-2017-16416) 1134343 WEB SQL Injection Attempt -86 1134344 WEB SQL Injection Attempt -87 1134345 WEB Sqlmap Injection Activity Modified 3 rule(s): --------------- 1132657 WEB-CLIENT Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability -1 (CVE-2016-3210) 1132832 WEB-CLIENT Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability -2 (CVE-2016-3210) 1134327 WEB EmbedThis GoAhead Web Server CGI Remote Code Execution (CVE-2017-17562) Deleted 6 rule(s): --------------- 1054857 WEB SQL injection attempt -8 (old rule) 1056720 WEB-CLIENT Generic Javascript Obfuscation -6 (old rule) 1131113 WEB-CLIENT Javascript Obfuscation in Exploit Kits - 2 (Ransomware Attack Vector) (old rule) 1131409 WEB-CLIENT Microsoft Internet Explorer Memory Corruption Vulnerability -1 (CVE-2015-2443) (old rule) 1133071 WEB-CLIENT Suspicious HTML Iframe Tag -18 (Ransomware Attack Vector) (old rule) 1133724 WEB-CLIENT Javascript Obfuscation in Exploit Kits - 93 (Ransomware Attack Vector) (old rule)