Apr 29

Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow – High Confidence (CVE-2007

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow – High Confidence protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Mail Content Protection Violation
Attack Information: Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow – High Confidence

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-10-apr2.html

Apr 29

IBM Java Multiple Packages Sandbox Breach (CVE-2012-4822)

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the IBM Java Multiple Packages Sandbox Breach protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: IBM Protection Violation
Attack Information: IBM Java Multiple Packages Sandbox Breach

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-13-mar1.html

Apr 29

Contaware FreeVimager GIF LZWMinimumCodeSize Memory Corruption

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Contaware FreeVimager GIF LZWMinimumCodeSize Memory Corruption – Improved Performance protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Content Protection Violation
Attack Information: Contaware FreeVimager GIF LZWMinimumCodeSize Memory Corruption – Improved Performance

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-11-apr2.html

Apr 29

Adobe Flash Player RTMP Code Execution (APSB13-11; CVE-2013-2555)

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Adobe Flash Player RTMP Code Execution (APSB13-11) protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Adobe Products Violation
Attack Information: Adobe Flash Player RTMP Code Execution (APSB13-11)

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-18-apr2.html

Apr 28

Apple QuickTime rnet Box Parsing Heap Buffer Overflow – Improved Performance (CVE-2012

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Apple QuickTime rnet Box Parsing Heap Buffer Overflow – Improved Performance protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Web Client Enforcement Violation
Attack Information: Apple QuickTime rnet Box Parsing Heap Buffer Overflow – Improved Performance

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-14-apr1.html

Apr 28

Apple QuickTime Plugin Content-Type Buffer Overflow – Improved Performance (CVE-2012

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Apple QuickTime Plugin Content-Type Buffer Overflow – Improved Performance protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Web Client Enforcement Violation
Attack Information: Apple QuickTime Plugin Content-Type Buffer Overflow – Improved Performance

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-21-apr1.html

Apr 28

Microsoft Internet Explorer JPEG Rendering Buffer Overflow (MS05-038; CVE-2005-1988)

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Microsoft Internet Explorer JPEG Rendering Buffer Overflow (MS05-038) – High Confidence protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Content Protection Violation
Attack Information: Microsoft Internet Explorer JPEG Rendering Buffer Overflow (MS05-038) – High Confidence

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-22-apr.html

Apr 28

Apache HTTPD mod_log_config Cookie Handling Denial of Service – High Confidence (CVE-2012

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Apache HTTPD mod_log_config Cookie Handling Denial of Service – High Confidence protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Web Server Enforcement Violation
Attack Information: Apache HTTPD mod_log_config Cookie Handling Denial of Service – High Confidence

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-13-mar.html

Apr 28

Oracle MySQL DELETE Heap Buffer Overflow Improved Performance (CVE-2012-5612)

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Oracle MySQL DELETE Heap Buffer Overflow Improved Performance protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: MySQL Protection Violation
Attack Information: Oracle MySQL DELETE Heap Buffer Overflow Improved Performance

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-21-apr.html

Apr 28

Java Applet Reflection Type Confusion Remote Code Execution (CVE-2013-2423)

How Can I Protect My Network?

  1. In the IPS tab, click Protections and find the Java Applet Reflection Type Confusion Remote Code Execution protection using the Search tool and Edit the protection’s settings.
  2. Install policy on all modules.

How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: Web Server Enforcement Violation
Attack Information: Java Applet Reflection Type Confusion Remote Code Execution

Article source: http://www.checkpoint.com/defense/advisories/public/2013/cpai-28-apr.html