*** NK8 RELS 3372 Release *** Total number of signatures: 3238 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 5 rule(s): --------------- 1134491 WEB Electron setAsDefaultProtocolClient Command Injection -1 (CVE-2018-1000006) 1134534 WEB-CLIENT Microsoft Edge COptionsCollectionCacheItem Out of Bounds Read -3 (CVE-2017-8734) 1134535 WEB-CLIENT Microsoft Edge Chakra AsmJSByteCodeGenerator EmitCall Type Confusion -3 (CVE-2018-0780) 1134536 WEB Jenkins Plugin Resources Directory Traversal (CVE-2018-6356) 1160895 VOIP LINE access via SSL -10 Modified 5 rule(s): --------------- 1069353 IM WhatsApp login via TCP -3 1133981 FILE Microsoft Office Composite Moniker Code Execution -1 (CVE-2017-8570) 1134002 FILE Microsoft .NET Framework Remote Code Execution (CVE-2017-8759) 1134017 WEB Apache Tomcat HTTP PUT Windows Remote Code Execution -1 (CVE-2017-12615) 1134020 WEB Apache HTTP OPTIONS Memory Leak (CVE-2017-9798) Deleted 14 rule(s): --------------- 1131344 FILE Microsoft Windows ATMFD Kernel Pool Buffer Overflow (CVE-2015-2426) (old rule) 1131374 WEB-CLIENT Microsoft Windows VBScript Regular Expression Information Disclosure -1 (CVE-2015-1684) (old rule) 1131377 FILE Microsoft Office Word CVE-2015-1649 Memory Corruption -1 (CVE-2015-1649) (old rule) 1131400 WEB Cross-site Scripting -28 (old rule) 1131401 WEB Cross-site Scripting -29 (old rule) 1131466 WEB-CLIENT Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2502) (old rule) 1131475 FILE Microsoft Windows Media Device Manager Insecure Library Loading -2 (CVE-2015-2369) (old rule) 1131479 WEB Ericom AccessNow Server Stack Buffer Overflow (CVE-2014-3913) (old rule) 1131480 WEB SearchBlox Multiple Security Vulnerabilities (CVE-2015-0969) (old rule) 1131498 WEB-CLIENT Apple Safari URL Handling Cross-Origin Security Bypass (CVE-2015-1126) (old rule) 1131511 WEB-CLIENT Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2486) (old rule) 1131516 WEB-CLIENT Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2490) (old rule) 1131519 WEB-CLIENT Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2491) (old rule) 1131520 WEB-CLIENT Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2492) (old rule)