Intrusion Prevention - Service Update History

Intrusion Prevention - Service Update History

The FortiGuard Global Threat Research Team releases regularly security content to cover multiple vulnerabilities:

'New' lists the newly added vulnerability coverage.
'Enhanced' lists the updated vulnerabilities where new vectors have been uncovered.
'Renamed' lists the vulnerabilities that are renamed for concistency and to standardize.
'Attribute Updated' lists the changes in severity, default action and status for recommened settings.

For information on the vulnerabilities (i.e. Description, Affected Products, Severity, Recommended Actions, etc), visit the its link to the IPS Encyclopedia. For more information, vistit FortiGuard Center at www.fortiguardcenter.com .

2.519

( Released date: 02-Jul-2008 )

The update contains coverage for vulnerabilities under research and development that would not affect normal operation.

2.518

( Released date: 02-Jul-2008 )

New ( 11 )

Apache.Tomcat.Host.Manager.Name.XSS ( medium )
BackWeb.LiteInstActivator.DLL.ActiveX.Access ( high )
CGI.Guestbook.SSI.Command.Execution ( high )
CitectSCADA.ODBC.Server.Buffer.Overflow ( high )
Creative.Software.Autoupdate.ActiveX.Access ( critical )
Gld.Postfix.Buffer.Overflow ( critical )
HP.Instant.Support.ActiveX.Control.Access ( critical )
OpenSSL.omit.Key.Exchange.DoS ( medium )
OpenSSL.Server.Name.Extension.DoS ( medium )
WinVNC.Web.Server.GET.Overflow ( critical )
Yahoo.Assistant.ActiveX.Control.Access ( critical )

Enhanced ( 4 )

IBM.Lotus.Sametime.StMux.EXE.Stack.Overflow ( high )
MS.GDI.CreateDIBPatternBrushPt.Function.Heap.Overflow ( critical )
MS.PGM.Invalid.Option.DoS ( medium )
MS.Windows.Media.Player.SAMI.Code.Execution ( critical )

Attribute Updated ( 2 )

MS.IE.DOM.SubstringData.Buffer.Overflow Group updated to 'web_client'
Xunlei.Thunder.Put.DapCtrl.ActiveX.Control.Access Group updated to 'web_misc'

Renamed ( 1 )

MS.IIS.Malformed.File.Extension.DoS Previous name: "IIS.Malformed.File.Extension.DoS"

2.517

( Released date: 26-Jun-2008 )

New ( 1 )

IBM.Lotus.Sametime.StMux.EXE.Stack.Overflow ( high )

Enhanced ( 1 )

Linksys.VoIP.Phone.Invalid.Char.DoS ( medium )

2.516

( Released date: 24-Jun-2008 )

New ( 2 )

MS.Visual.Studio.WMI.Object.Broker.Code.Execution ( critical )
Yahoo.Messenger.File.Transfer.Filename.Spoofing ( medium )

Enhanced ( 2 )

CA.BrightStor.ARCserve.Backup.XDR.Parsing.Buffer.Overflow ( critical )
MS.Excel.Malformed.OBJECT.Type.File.Code.Execution ( high )

Attribute Updated ( 1 )

CA.BrightStor.ARCserve.Backup.XDR.Parsing.Buffer.Overflow Group updated to 'applications2'

2.515

( Released date: 19-Jun-2008 )

New ( 5 )

Adobe.Flash.Player.SWF.JPG.Buffer.Overflow ( high )
Akamai.Download.Manager.Code.Execution ( high )
Apple.Safari.Windows.Platform.Arbitrary.File.Download ( high )
CA.BrightStor.ARCserve.Backup.XDR.Parsing.Buffer.Overflow ( critical )
MS.Windows.WinHlp.Buffer.Overflow ( high )

Enhanced ( 3 )

Adobe.Flash.Player.SWF.Parsing.Code.Execution ( critical )
TFTP.Server.error.Buffer.Overflow ( critical )
Wonderware.SuiteLink.DoS ( medium )

2.514

( Released date: 16-Jun-2008 )

New ( 2 )

CA.DSM.gui_cm_ctrls.ActiveX.Control.Access ( critical )
Xunlei.Thunder.Put.DapCtrl.ActiveX.Control.Access ( critical )

2.513

( Released date: 13-Jun-2008 )

New ( 7 )

MS.IE.DOM.SubstringData.Buffer.Overflow ( critical )
MS.IE.XMLHttpRequest.Http.Header.Overwritten ( medium )
MS.PGM.Fragment.Option.DoS ( medium )
MS.PGM.Invalid.Option.DoS ( medium )
MS.Windows.Media.Player.SAMI.Code.Execution ( critical )
MS.Windows.Sapi.DLL.ActiveX.Access ( medium )
MS.Windows.WINS.Privilege.Elevation ( medium )

Enhanced ( 5 )

Apache.CGI.Byterange.Request.DoS ( medium )
Apple.MacOS.X.mDNSResponder.Location.Overflow ( critical )
Asterisk.T.38.Buffer.Overflow ( high )
CA.DBASVR.RPC.Server.Crafted.Pointer.Buffer.Overflow ( critical )
EMC.Legato.Networker.Exec.Service.Buffer.Overflow ( critical )

2.512

( Released date: 12-Jun-2008 )

New ( 2 )

Adobe.Flash.Player.SWF.Parsing.Code.Execution ( critical )
CA.BrightStor.ARCserve.AddColum.ActiveX.Buffer.Overflow.A ( critical )

Enhanced ( 1 )

Apple.iCal.COUNT.Integer.Overflow ( medium )

Attribute Updated ( 1 )

MS.Windows.Vista.Gadgets.Code.Execution Status updated to 'disable'

2.511

( Released date: 10-Jun-2008 )

New ( 8 )

Apple.iCal.COUNT.Integer.Overflow ( medium )
Divx.Player.SRT.Buffer.Overflow ( critical )
MS.IE.Control.Status.Bar.Spoofing ( low )
MS.Word.Javascript.Execution ( high )
Orbit.Downloader.Buffer.Overflow ( critical )
Symantec.Altiris.Deployment.SQL.Injection ( high )
Symantec.Norton.SymAData.DLL.ActiveX.Access ( critical )
TFTP.Server.error.Buffer.Overflow ( critical )

Enhanced ( 7 )

Adobe.Reader.Subroutine.Pointer.Overwrite.Memory.Corruption ( critical )
CA.BrightStor.HSM.Remote.Stack.Based.Overflow ( medium )
Macromedia.ShockwaveFlash.ActiveX.Buffer.Overflow ( high )
MS.PowerPoint.Malformed.Records.Code.Execution ( high )
MS.Windows.Vista.Gadgets.Code.Execution ( medium )
PHP.URI.Code.Injection ( high )
Samba.LSA.RPC.LsarAddPrivilegesToAccount.Heap.Overflow ( critical )

Attribute Updated ( 1 )

Samba.LSA.RPC.LsarAddPrivilegesToAccount.Heap.Overflow Severity updated to 'critical'

Renamed ( 3 )

MS.IIS.IndexServer.Disclosure Previous name: "IndexServer.Disclosure"
MS.Windows.NetBIOS.NULL.Name Previous name: "Microsoft.Windows.NetBIOS.NULL.Name"
Samba.LSA.RPC.LsarAddPrivilegesToAccount.Heap.Overflow Previous name: "SMB.DCERPC.SamrEnumerateDomiansInSamServer.Information.Leak"

2.510

( Released date: 05-Jun-2008 )

New ( 5 )

Apache.HTML.Injection.And.UTF7.XSS ( medium )
D-Link.Mpeg4.VAPGDecoder.Url.ActiveX.Control.Access ( critical )
Email.Attachment.Mailto.URI.Buffer.Overflow ( critical )
HP.OpenView.NNM.ovalarmsrv.Format.String ( high )
Zango.DownloadAndExecute.ActiveX.Control.Access ( high )

Enhanced ( 2 )

Macromedia.ShockwaveFlash.ActiveX.Buffer.Overflow ( high )
MS.PowerPoint.Malformed.Records.Code.Execution ( high )

Attribute Updated ( 1 )

Macromedia.ISAPI.GET.Buffer.Overflow Status updated to 'disable'

2.509

( Released date: 03-Jun-2008 )

New ( 1 )

Adobe.Acrobat.AcroPDF.DLL.DoS ( high )

Enhanced ( 3 )

Corel.WordPerfect.PRS.Buffer.Overflow ( critical )
PHP.URI.Code.Injection ( high )
Real.Player.rmoc3260.ActiveX.Control.Remote.Code.Execution ( high )

2.508

( Released date: 02-Jun-2008 )

New ( 2 )

Subversion.WebDav.REPORT.Query.Buffer.Overflow ( high )
Subversion.WebDAV.Stack.Overflow ( high )

2.507

( Released date: 29-May-2008 )

New ( 2 )

P2P.LimeWire.Gnutella.Detection ( info )
Wonderware.SuiteLink.DoS ( medium )

Enhanced ( 20 )

Cisco.Call.Manager.CTLProvider.Heap.Overflow ( critical )
Icecast.HTTP.Header.Overflow ( high )
Macromedia.ISAPI.GET.Buffer.Overflow ( medium )
MDaemon.Form2Raw.Message.Handler.Buffer.Overflow ( high )
Mozilla.NSS.SSLv2.Client.Integer.Underflow ( high )
Mozilla.NSS.SSLv2.Server.Stack.Overflow ( high )
MS.Messenger.PNG.Buffer.Overflow ( critical )
MS.Windows.DirectX.SAMI.File.Parse.Buffer.Overflow ( critical )
Netscape.SSLv2.Heap.Overflow ( high )
OpenSSL.ClientMasterkey.Overflow ( high )
OpenSSL.Handshake.DoS ( critical )
Oracle.Reports.Server.DESName.Remote.File.Overwrite ( low )
Oracle.Reports.Servlet.Command.Execution.Attempt ( high )
PHP.URI.Code.Injection ( high )
POP3.Server.PASS.Buffer.Overflow ( high )
SoftEther.Connect.SSH ( info )
SSLBomb.Binary ( low )
SSLBomb.Hello ( low )
SSLv2.Get.Shared.Ciphers.Overflow ( medium )
SSLv2.Null.Pointer.Dereference.Client.DoS ( medium )

Attribute Updated ( 4 )

BrightStor.ARCserve.UDP.Probe.Buffer.Overflow Status updated to 'disable'
MS.Excel.Malformed.Record.Memory.Corruption Status updated to 'enable'
MS.Windows.2000.LANMAN.DoS Status updated to 'disable'
SMB.DCERPC.WKSSVC.NetrJoinDomain2.Buffer.Overflow Default_action updated to 'drop'

2.506

( Released date: 27-May-2008 )

Enhanced ( 2 )

Subversion.SVN.Parser.Integer.Overflow ( critical )
TOR.Web.Proxy.Detection ( info )

2.505

( Released date: 26-May-2008 )

New ( 3 )

Danmec.Asprox.SQL.Injection ( high )
HP.OpenView.Network.Node.Manager.ovspmd.Buffer.Overflow ( critical )
HTTP.Referer.Header.SQL.Injection ( medium )

2.504

( Released date: 23-May-2008 )

Enhanced ( 2 )

CA.BrightStor.ARCserve.Backup.AddColumn.ActiveX.Buffer.Overflow ( critical )
MS.Excel.Malformed.File.Format.Parsing.Code.Execution ( high )

2.503

( Released date: 22-May-2008 )

Enhanced ( 7 )

IBM.Informix.Dynamic.Server.Authentication.Stack.Overflow ( high )
MS.Media.Server.Remote.Arbitrary.File.Rewrite ( critical )
MS.Windows.Vista.Gadgets.Code.Execution ( medium )
OpenSSL.ASN.1.Double.Free ( high )
SaPHPLesson.Add.PHP.And.Show.PHP.SQL.Injection ( high )
SSLv2.Openssl.Get.Shared.Ciphers.Overflow.Attempt ( high )
VBE.Document.Property.Buffer.Overflow ( high )

2.502

( Released date: 21-May-2008 )

New ( 1 )

CA.BrightStor.ARCserve.Buffer.Overflow ( critical )

Enhanced ( 4 )

HP.OpenView.Network.Node.Manager.Remote.Command.Execution ( high )
IE.Vector.Graphics.Rendering.Library.Buffer.Overflow ( critical )
Linux.Kernel.SNMP.NAT.Helper.DoS ( low )
MS.SNMP.Service.Code.Execution ( high )

2.501

( Released date: 20-May-2008 )

New ( 4 )

MS.Publisher.OH.otyEscherTable.Memory.Corruption ( critical )
MS.Windows.ASN.1.Bitstring.Overflow.B ( high )
MS.Word.HTML.CSS.Double.Free ( critical )
MS.Word.RTF.Drawing.Object.Integer.Overflow ( critical )

Enhanced ( 4 )

ClamAV.libclamav.PE.File.Handling.Integer.Overflow ( critical )
MS.PowerPoint.Malformed.Data.Record.Code.Execution ( high )
RaXnet.Cacti.GraphImage.PHP.Remote.Command.Execution ( high )
SAP.Message.Server.Group.Parameter.Remote.Buffer.Overflow ( critical )

Attribute Updated ( 1 )

BrightStor.ARCserve.UDP.Probe.Buffer.Overflow Status updated to 'disable'

Renamed ( 1 )

MS.Excel.SLK.File.Import.Code.Execution Previous name: "MS.Excel.File.Import.Code.Execution"

2.500

( Released date: 15-May-2008 )

New ( 3 )

Cacti.Graph_image.php.DoS ( low )
HP.HPeDiag.ActiveX.Control.Access ( high )
MS.Works.WkImgSrv.DLL.ActiveX.Control.Access ( high )

Enhanced ( 2 )

CA.BrightStor.ARCserve.Backup.Tape.Engine.RPC.Code.Execution ( critical )
SaPHPLesson.Add.PHP.And.Show.PHP.SQL.Injection ( high )

Attribute Updated ( 1 )

MS.Excel.Malformed.Record.Memory.Corruption Status updated to 'disable'

2.499

( Released date: 14-May-2008 )

New ( 1 )

MS.Windows.Kodak.Image.Viewer.TIFF.Buffer.Overflow ( critical )

Enhanced ( 1 )

CA.BrightStor.ARCserve.Backup.Buffer.Overflow ( critical )

Attribute Updated ( 2 )

MS.IE.Malformed.IFRAME.Buffer.Overflow Status updated to 'disable'
Trojan.Storm.Worm.Krackin.Detection Status updated to 'enable'

2.498

( Released date: 13-May-2008 )

New ( 14 )

Akamai.Download.Manager.ActiveX.Insecure.Parameter.Used ( high )
Apple.Quicktime.Kodak.Encoding.Heap.Overflow ( high )
Borland.StarTeam.Server.Buffer.Overflow ( critical )
ClamAV.libclamav.PE.File.Handling.Integer.Overflow ( critical )
Corel.WordPerfect.PRS.Buffer.Overflow ( critical )
IBM.Informix.Dynamic.Server.Authentication.Stack.Overflow ( high )
MS.Excel.File.Import.Code.Execution ( critical )
MS.Office.Web.Components.ActiveX.Remote.Code.Execution ( critical )
MS.Vista.Negotiate.Dialects.DoS ( medium )
Real.Player.rmoc3260.ActiveX.Control.Remote.Code.Execution ( high )
Sun.Java.Web.Start.Encoding.Stack.Buffer.Overflow ( medium )
Sybase.SQL.Anywhere.MobiLink.Crafted.Strings.Buffer.Overflow ( critical )
TOR.Web.Proxy.Detection ( info )
WireShark.SNMP.Dissector.DoS ( medium )

Enhanced ( 22 )

Apache.ModSSL.SSLUtilUUEncodeBinary.Buffer.Overflow ( high )
Apple.Mail.x-unix-mode.Executable.Mail.Attachment ( medium )
Apple.Terminal.x-man-page.Command.Execution ( high )
HP.OpenView.NNM.OVAS.Pre.Authentication.Buffer.Overflow ( high )
McAfee.Framework.ePolicy.Format.String ( high )
Mozilla.Products.Remote.Vulnerability ( medium )
MS.Agent.URL.Parsing.Remote.Code.Execution ( critical )
MS.IIS.ASP.Dll.HTMLEncode.Buffer.Overflow ( high )
MS.IIS.Privilege.Escalation.ASP.Upload ( medium )
MS.Outlook.URI.Handling.Code.Execution ( critical )
MS.Visio.Compressed.Document.Packed.Object.Code.Execution ( critical )
MS.Windows.2000.LANMAN.DoS ( low )
MS.Windows.Compressed.Folder.Buffer.Overflow ( critical )
MS.Windows.Schannel.Security.Package.Code.Execution ( critical )
Netscape.Client.Detection.Tool.Buffer.Overflow ( high )
OpenSSL.SSLv3.Client.SessionID.Buffer.Overflow ( critical )
PacketiX.Traffic.Detection ( info )
Playlist.Buffer.Overflow ( high )
SMB.DCERPC.WKSSVC.NetrJoinDomain2.Buffer.Overflow ( critical )
SSLBomb.Binary ( low )
SSLBomb.Hello ( low )
VBE.Document.Property.Buffer.Overflow ( high )

Renamed ( 2 )

FutureSoft.TFTP.Buffer.Overflow Previous name: "FutureSoft.TFTP.Vuln"
Netscape.SSLv2.Heap.Overflow Previous name: "Netscape.SSL.v2.Heap.Overflow"

2.497

( Released date: 08-May-2008 )

The update contains coverage for vulnerabilities under research and development that would not affect normal operation.

2.496

( Released date: 07-May-2008 )

New ( 3 )

Asterisk.T.38.Buffer.Overflow ( high )
PHP.showcode.php.PAGE.Parameter.File.Inclusion ( medium )
Sun.Solaris.rpc.ypupdated.Remote.Command.Execution ( critical )

Enhanced ( 15 )

CA.BrightStor.ARCServe.Backup.LGServer.Username.Overflow ( critical )
IBM.Lotus.Domino.IMAP.Server.Buffer.Overflow ( critical )
IBM.Tivoli.Monitoring.Express.Universal.Agent.Buffer.Overflow ( critical )
MS.Agent.URL.Parsing.Remote.Code.Execution ( critical )
MS.Excel.Selection.Record.cref.Code.Execution ( high )
MS.Excel.Unspecified.Remote.Code.Execution ( high )
MS.Excel.Worksheet.Remote.Code.Execution ( critical )
MS.IIS.ISAPI.HTR.Buffer.Overflow ( high )
MS.Message.Queuing.Service.Buffer.Overflow ( high )
MS.NET.Framework.NULL.Byte.Termination.Information.Disclosure ( high )
MS.Windows.Mailslot.Heap.Overflow ( high )
MySQL.yaSSL.Buffer.Overflow ( high )
Subversion.SVN.Parser.Integer.Overflow ( critical )
URI.Request.XSS ( medium )
Veritas.NetBackup.Volume.Manager.Daemon.Buffer.Overflow ( high )

Attribute Updated ( 6 )

MS.IIS.DLL.Request.DoS Status updated to 'disable'
MS.IIS.ISAPI.HTR.Buffer.Overflow Default_action updated to 'pass'
Multiple.Browsers.Domain.Name.Remote.Buffer.Overflow Status updated to 'disable'
PacketiX.Traffic.Detection Severity updated to 'info'
PHP.memory.limit.Code.Execution Status updated to 'disable'
SoftEther.Connect.SSH Severity updated to 'info'

Renamed ( 1 )

MS.Excel.Selection.Record.cref.Code.Execution Previous name: "Microsoft.Excel.Selection.Recored.cref.Code.Execution"

2.495

( Released date: 01-May-2008 )

New ( 1 )

PHP.URI.Code.Injection ( high )

Enhanced ( 1 )

MS.IIS.Web.Application.SourceCode.Disclosure ( medium )

2.494

( Released date: 29-Apr-2008 )

New ( 20 )

ACal.Calendar.Cookie.Based.Authentication.Bypass ( high )
Apache.MOD_IMAGEIMAP.Module.XSS ( medium )
Apache.mod_negotiation.Filename.Handling.XSS ( medium )
Apple.Quicktime.Clipping.Region.Heap.Overflow ( critical )
Apple.Quicktime.PICT.Opcode.Memory.Corruption ( critical )
Apple.QuickTime.QTIF.idsc.Code.Execution ( critical )
Borland.VisiBroker.Osagent.Exe.Code.Execution ( critical )
CA.BrightStor.ARCserve.Backup.AddColumn.ActiveX.Buffer.Overflow ( critical )
Cisco.Call.Manager.CTLProvider.Heap.Overflow ( critical )
HP.OpenView.NNM.OVAS.Pre.Authentication.Buffer.Overflow ( high )
McAfee.Framework.ePolicy.Format.String ( high )
Mozilla.Products.Remote.Vulnerability ( medium )
MS.Excel.Formula.Parsing.Code.Execution ( critical )
MS.Visio.DXF.File.Handling.Memory.Corruption ( medium )
Novell.GroupWise.SRC.Parameter.Stack.Overflow ( critical )
PHP.CSS.Parameter.XSS ( medium )
Rising.Antivirus.Web.Scan.ActiveX.Control.Access ( high )
SAP.Message.Server.Group.Parameter.Remote.Buffer.Overflow ( critical )
Symantec.Backup.Exec.Scheduler.ActiveX.Buffer.Overflow ( critical )
Tumbleweed.SecureTransport.TransferFile.ActiveX.Access ( high )

Enhanced ( 8 )

CA.Alert.Notification.Server.Buffer.Overflow ( critical )
Mozilla.Firefox.Favicon.Link.Tag.Script.Injection ( high )
Mozilla.Firefox.IconURL.Arbitrary.JavaScript.Execution ( medium )
MS.CAPICOM.ActiveX.Access ( critical )
MS.Office.Web.Components.ActiveX.Buffer.Overflow ( critical )
MS.Works.File.Converter.Input.Validation ( critical )
SaPHPLesson.Add.PHP.And.Show.PHP.SQL.Injection ( high )
Sun.Java.XSLT.Stylesheets.Processing.Code.Execution ( critical )

Attribute Updated ( 18 )

DCERPC.Bind.Invalid Status updated to 'disable'
HTTP.Request.Host.Header.Decimal Status updated to 'disable'
IIS.HTR.IDC.STM.File.Extension.Buffer.Overflow Status updated to 'disable'
IM.Yahoo.Web.Messenger Status updated to 'disable'
Ipswitch.Calendar.Directory.Traversal Severity updated to 'medium'
MS.IE.DXImageTransform.Vuln Severity updated to 'high'
MS.IE.Status.Bar.URL.Spoofing Severity updated to 'medium'
MS.Windows.SMB.DCERPC.NTLMSSP.Attempt Severity updated to 'medium'
Rediff.Messenger.Sever.Access Status updated to 'disable'
SNMP.Public.Community.String.TCP Status updated to 'disable'
Stream.Media Status updated to 'disable'
StreamTheWorld.Online.Radio.Detection Status updated to 'disable'
ToolTalk.ttdbserverd.Access Status updated to 'disable'
TrackerCam.ComGetLogFile.Path.Disclosure Severity updated to 'medium'
VERITAS.Backup.Exec.Registry.Access Severity updated to 'high'
Winmx.login Status updated to 'disable'
Yahoo.Mail.Messenger.Login Status updated to 'disable'
Yahoo.Safe.Search.Off Status updated to 'disable'

Renamed ( 3 )

IIS.HTR.IDC.STM.File.Extension.Buffer.Overflow Previous name: "HTRIDCSTM.Overflow"
SaPHPLesson.Add.PHP.And.Show.PHP.SQL.Injection Previous name: "SaPHPLesson.Add.PHP.SQL.Injection"
URI.Request.XSS Previous name: "URI.Request..XSS"

2.493

( Released date: 24-Apr-2008 )

New ( 2 )

MS.IE.ADODB.Recordset.Filter.DoS ( low )
Novell.GroupWise.Messenger.HTTP.POST.Val.DoS ( medium )

Enhanced ( 4 )

MonitorLine.Links.Management.Index.PHP.SQL.Injection ( medium )
MS.GDI.CreateDIBPatternBrushPt.Function.Heap.Overflow ( critical )
MS.Windows.GDI.Stack.Overflow ( critical )
TimbuktuPro.Notes.Directory.Traversal ( critical )

Attribute Updated ( 2 )

LANDesk.Management.Suite.Alert.Service.Buffer.Overflow Status updated to 'disable'
MS.IIS.Privilege.Escalation.ASP.Upload Status updated to 'disable'

Renamed ( 2 )

MS.IIS.Privilege.Escalation.ASP.Upload Previous name: "MS.IIS.Priviledge.Escalation.ASP.Upload"
URI.Request..XSS Previous name: "FlexWATCH.Camera.XSS"

2.492

( Released date: 22-Apr-2008 )

New ( 12 )

3ivx.MPEG4.File.Processing.Buffer.Overflow ( high )
Apple.Quicktime.Panorama.Buffer.Overflow ( critical )
Cisco.ACS.UCP.CGI.Pre.Authentication.Buffer.Overflow ( critical )
IrfanView.FlashPix.Plugin.Buffer.Overflow ( critical )
MS.Excel.Conditional.Formatting.Stack.Overflow ( critical )
MS.Excel.Style.Record.Memory.Corruption ( critical )
MS.IE.DivX.Web.Player.DoS ( high )
MS.Outlook.URI.Handling.Code.Execution ( critical )
Novell.EDirectory.LDAP.Extended.Request.Buffer.Overflow ( critical )
Postfix.IPv6.Unauthorized.Mail.Relay ( low )
Sun.Java.XSLT.Stylesheets.Processing.Code.Execution ( critical )
TimbuktuPro.Notes.Directory.Traversal ( critical )

Enhanced ( 7 )

CA.AntiVirus.Engine.CAB.File.Name.Handling.Code.Execution ( critical )
ClamAV.Mail.Filter.Crafted.Recipient.Command.Execution ( high )
MS.Excel.Sheet.Name.Integer.Overflow ( low )
MS.Jet.DataBase.Engine.MDB.File.Parse.Buffer.Overflow ( critical )
MS.Office.Web.Components.ActiveX.Buffer.Overflow ( critical )
MS.Windows.Active.Directory.LDAP.Request.Code.Execution ( critical )
Worm.Slammer ( high )

Renamed ( 2 )

CA.AntiVirus.Engine.CAB.File.Name.Handling.Code.Execution Previous name: "CAB.Packet.File.Name.Overlong"
MS.Windows.2000.LANMAN.DoS Previous name: "MS.Windows.2000.LANMAN.TCP.DoS"

2.491

( Released date: 17-Apr-2008 )

New ( 1 )

Mozilla.JavaScript.Engine.Memory.Corruption ( high )

Enhanced ( 3 )

Adobe.Acrobat.AcroPDF.Memory.Corruption ( high )
MS.IIS.ASP.Dll.HTMLEncode.Buffer.Overflow ( high )
MySQL.yaSSL.Buffer.Overflow ( high )

Attribute Updated ( 1 )

MS.NET.Framework.NULL.Byte.Termination.Information.Disclosure Group updated to 'web_app'

Renamed ( 2 )

HTTP.Server.Authorization.Buffer.Overflow Previous name: "AOLServer.Authorization.BufferOverflow"
MS.IIS.ISAPI.HTR.Buffer.Overflow Previous name: "IIS.ISAPI.HTR.Buffer.Overflow"

2.490

( Released date: 15-Apr-2008 )

New ( 15 )

Citrix.IMA.Service.Remote.Command.Execution ( critical )
ClamAV.libclamav.MEW.PE.File.Handling.Integer.Overflow ( high )
ELynx.SwiftView.ActiveX.Control.Access ( critical )
IMAP.Commands.NULL.Pointer.DoS ( medium )
MS.Excel.DVAL.Record.Memory.Corruption ( critical )
MS.GDI.CreateDIBPatternBrushPt.Function.Heap.Overflow ( critical )
MS.IIS.ASP.Dll.HTMLEncode.Buffer.Overflow ( high )
MS.Office.Web.Components.ActiveX.Buffer.Overflow ( critical )
MS.Scripting.Engine.Base64.Decode.Overflow ( critical )
MS.Windows.GDI.Stack.Overflow ( critical )
Novell.iPrint.ActiveX.Code.Execution ( critical )
Qvod.Player.Url.ActiveX.Control.Buffer.Overflow ( critical )
Samba.Remote.Print.Change.Notify.DoS ( low )
Smart.Publisher.Disp.PHP.Filedata.Parameter.Code.Injection ( medium )
Symantec.Backup.Exec.System.Manager.File.Upload.Bypass ( critical )

Enhanced ( 11 )

FTP.List.Command.Drive.Content.Disclosure ( high )
HTTP.Critical.File.Download ( low )
IIS.ISAPI.HTR.Buffer.Overflow ( high )
LPD.Command.Buffer.Overflow ( high )
MS.Excel.Malformed.Sheet.Name.Code.Execution ( high )
MS.GDIPlus.JPEG.Buffer.Overflow ( critical )
MS.Outlook.Object.Security.Bypass ( medium )
Novell.Netware.Client.Print.Provider.Buffer.Overflow ( high )
TrendMicro.OfficeScan.CGI.Buffer.Overflow ( critical )
VLC.MediaPlayer.Format.String ( high )
Web.Browser.URL.Arbitrary.FTP.Command.Execution ( medium )

Attribute Updated ( 7 )

ImageMagick.ReadDIBImage.Integer.Overflow Status updated to 'disable'
LPD.Command.Buffer.Overflow Status updated to 'disable'
Mozilla.Firefox.JavaScript.Lambda.Memory.Disclosure Status updated to 'disable'
MS.GDIPlus.JPEG.Buffer.Overflow Status updated to 'disable'
MS.IIS.DLL.Request.DoS Status updated to 'disable'
MS.NET.Framework.NULL.Byte.Termination.Information.Disclosure Group updated to 'web_misc'
MS.Office.Malformed.GIF.Code.Execution Status updated to 'disable'

Renamed ( 3 )

Cisco.IOS.HTTP.Command.Execution Previous name: "Cisco.IOS.HTTP.CommandExecution"
FTP.List.Command.Drive.Content.Disclosure Previous name: "CooolSoft.PowerFTP.Drive.Content.Disclose"
HTTP.Critical.File.Download Previous name: "HTTP.Passwd.File.Download"

2.489

( Released date: 10-Apr-2008 )

The update contains coverage for vulnerabilities under research and development that would not affect normal operation.

2.488

( Released date: 09-Apr-2008 )

Enhanced ( 2 )