16-025 (September 6, 2016)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

RealNetworks Helix Server
1004120* - RealNetworks Helix Server NTLM Authentication Heap Buffer Overflow Vulnerability (CVE-2010-1318)


Suspicious Client Application Activity
1007907 - Cisco ASA Memory Corruption Vulnerability (CVE-2016-6366)


Web Application Ruby Based
1005331* - Ruby On Rails XML Processor YAML Deserialization DoS


Web Client Common
1007630* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB16-14) - 5
1007590* - Adobe Flash Player DLL Hijacking Vulnerability Over WebDAV (CVE-2016-1014)
1007676* - Adobe Flash Player Heap Overflow Vulnerability (CVE-2016-4136)
1007452 - Adobe Flash Player Use After Free Vulnerability (CVE-2016-0959)
1003742* - FFmpeg OGV File Format Double Free Memory Corruption
1003747* - FFmpeg vmd_read_header Integer Overflow
1007918 - Fortinet FortiGate Cookie Parser Buffer Overflow Vulnerability (CVE-2016-6909)
1006532* - Identified Malicious Adobe Flash SWF File - 1
1007919 - Microsoft .NET Framework And Silverlight Array Offset Vulnerability (CVE-2011-0664)
1007911 - Microsoft .NET Framework XAML Browser Applications Stack Corruption (CVE-2010-3958)
1007882* - Microsoft Windows Graphics Component Remote Code Execution Vulnerability (CVE-2016-3303)
1007558* - Microsoft Windows OLE Remote Code Execution Vulnerability (CVE-2016-0153)


Web Server Miscellaneous
1005516* - RedHat JBoss Enterprise Application Platform Block Access To Status Servlet


Windows Services RPC Client DCERPC
1007538* - Windows Client Port Mapper Decoder


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.