Thursday, May 2, 2024
Latest:

Computer Security Articles

RSS Reader for Computer Security Articles

Security TrendMicro 

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 10, 2017

admin , ,

Credit to Author: Elisa Lippincott (TippingPoint Global Product Marketing)| Date: Fri, 14 Apr 2017 13:36:54 +0000

Earlier this week marked the end of support for Windows Vista. This means anyone using Vista will no longer receiving new security updates, non-security hotfixes, free or paid assisted support options, or online technical content updates from Microsoft. If you’re unable to update your version of Windows, this is where virtual patching becomes very important. Virtual patching gives you added protection when patches aren’t available. Our solutions can help you gain control of your patch management lifecycle with pre-emptive coverage between the discovery of a vulnerability and the availability of a patch, as well as protection for legacy, out-of-support software.

This month also marks the end of Microsoft security bulletins. I liked using a RSS feed to see the latest Microsoft bulletins, but now, Microsoft is directing everyone to their Security Update Guide, where you can search by CVE or Knowledge Base article. Time will tell how IT admins will adjust to the new format. As you’ll see in the Microsoft update below, my table is a little different now since there is no longer a Microsoft bulletin number associated with the CVEs.

Microsoft Update

This week’s Digital Vaccine (DV) package includes coverage for Microsoft updates released on or before April 11, 2017. Patches were released for 45 unique CVEs in Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office and Microsoft Office Services and Web Apps, Visual Studio for Mac, .NET Framework, Silverlight and Adobe Flash Player. The following table maps Digital Vaccine filters to the Microsoft updates. You can get more detailed information on this month’s security updates from Dustin Childs’ April 2017 Security Update Review:

CVE #Digital Vaccine Filter #Status
CVE-2013-6629Insufficient Vendor Information
CVE-2017-0058Insufficient Vendor Information
CVE-2017-0093Insufficient Vendor Information
CVE-2017-010627423
CVE-2017-015527727
CVE-2017-015827719
CVE-2017-0159Insufficient Vendor Information
CVE-2017-016027740
CVE-2017-0162Insufficient Vendor Information
CVE-2017-0163Insufficient Vendor Information
CVE-2017-0164Insufficient Vendor Information
CVE-2017-016527739
CVE-2017-0166Insufficient Vendor Information
CVE-2017-016727729
CVE-2017-0168Insufficient Vendor Information
CVE-2017-0169Insufficient Vendor Information
CVE-2017-0178Insufficient Vendor Information
CVE-2017-0179Insufficient Vendor Information
CVE-2017-0180Insufficient Vendor Information
CVE-2017-0181Insufficient Vendor Information
CVE-2017-0182Insufficient Vendor Information
CVE-2017-0183Insufficient Vendor Information
CVE-2017-0184Insufficient Vendor Information
CVE-2017-0185Insufficient Vendor Information
CVE-2017-0186Insufficient Vendor Information
CVE-2017-018827731
CVE-2017-018927732
CVE-2017-0191Insufficient Vendor Information
CVE-2017-019227733
CVE-2017-019427728
CVE-2017-0195Insufficient Vendor Information
CVE-2017-019727736
CVE-2017-019927726
CVE-2017-020027723
CVE-2017-0201Insufficient Vendor Information
CVE-2017-020227724
CVE-2017-0203Insufficient Vendor Information
CVE-2017-0204Insufficient Vendor Information
CVE-2017-020527725
CVE-2017-0207Insufficient Vendor Information
CVE-2017-020827737

 

Zero-Day Filters

There are 15 new zero-day filters covering two vendors in this week’s Digital Vaccine (DV) package. A number of existing filters in this week’s DV package were modified to update the filter description, update specific filter deployment recommendation, increase filter accuracy and/or optimize performance. You can browse the list of published advisories and upcoming advisories on the Zero Day Initiative website.

Adobe (10)

  • 27554: ZDI-CAN-4431: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 27556: ZDI-CAN-4432: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 27748: ZDI-CAN-4486: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 27749: ZDI-CAN-4487: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 27750: ZDI-CAN-4488: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 27751: ZDI-CAN-4489: Zero Day Initiative Vulnerability (Adobe Reader DC)
  • 27753: ZDI-CAN-4490: Zero Day Initiative Vulnerability (Adobe Reader DC)
  • 27808: ZDI-CAN-4491: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 27809: ZDI-CAN-4492: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 27811: ZDI-CAN-4493: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)

MIcrosoft (5)

  • 27743: ZDI-CAN-4481: Zero Day Initiative Vulnerability (Microsoft Windows PDF Library)
  • 27744: ZDI-CAN-4482: Zero Day Initiative Vulnerability (Microsoft Windows PDF Library)
  • 27745: ZDI-CAN-4483: Zero Day Initiative Vulnerability (Microsoft Windows PDF Library)
  • 27746: ZDI-CAN-4484: Zero Day Initiative Vulnerability (Microsoft Windows PDF Library)
  • 27747: ZDI-CAN-4485: Zero Day Initiative Vulnerability (Microsoft Windows PDF Library) 

Missed Last Week’s News?

Catch up on last week’s news in my weekly recap.

http://feeds.trendmicro.com/TrendMicroSimplySecurity