*** NK8 RELS 3412 Release *** Total number of signatures: 3220 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 5 rule(s): --------------- 1135284 WEB-CLIENT Javascript Obfuscation in Exploit Kits - 104 (Possible Exploit Kit) 1135285 WEB-CLIENT Microsoft ChakraCore Scripting Engine CVE-2018-0933 Remote Memory Corruption 1135286 WEB-CLIENT Microsoft Edge Chakra Magic Value Type Confusion (CVE-2018-0953) 1135301 MALWARE Shamoon RPC Activity -31 1135302 MALWARE Shamoon RPC Activity -32 Modified 2 rule(s): --------------- 1134915 WEB Project Pier 0.8.8 Arbitrary Command Execution (CVE-2018-10759) 1135280 WEB phpMyAdmin Navigation-Tree Stored Cross-Site Scripting -1.1 (CVE-2018-19970) Deleted 10 rule(s): --------------- 1058947 SCADA Yokogawa CENTUM CS 3000 BKBCopyD.exe Buffer Overflow (CVE-2014-0784) (old rule) 1058951 SCADA Yokogawa CENTUM CS 3000 BKHOdeq.exe Buffer Overflow (CVE-2014-0783) (old rule) 1058961 SCADA Yokogawa CENTUM CS 3000 BKCLogSvr.exe Heap Buffer Overflow (CVE-2014-0781) (old rule) 1059411 WEB Umbraco CMS Remote Command Execution (OSVDB-83765) (old rule) 1059413 FILE Microsoft Word RTF listoverridecount Memory Corruption -1 (CVE-2014-1761) (old rule) 1059414 WEB Sophos Web Protection Appliance Interface Authenticated Arbitrary Command Execution (ZDI-14-069) (old rule) 1059415 WEB eScan Web Management Console Command Injection (old rule) 1059419 DB PostgreSQL Database geo_ops path_in Integer Overflow (CVE-2014-0064) (old rule) 1059433 FILE Adobe Flash Player SharedObject Use After Free -1 (CVE-2014-0502) (old rule) 1059437 WEB-ACTIVEX IBM SPSS SamplePower Vsflex8l.ocx ComboList And ColComboList Buffer Overflow (CVE-2014-0895) (old rule)