|Thank you for subscribing to Digital Vaccine updates brought to you by Trend Micro™ TippingPoint DVLabs.|
New content is now available at the Threat Management Center (TMC): https://tmc.tippingpoint.com.
Note: This is an out-of-band Digital Vaccine that addresses the Microsoft Internet Explorer patch for CVE-2018-8653. We are also removing filter 33762 since Adobe pulled the case for CVE-2018-16018. The regular weekly DV will be published as scheduled on Tuesday, December 25, 2018.
SMS customers can update the Digital Vaccine through the SMS client. From the top line menu, you can open the "File > Download Digital Vaccine from TMC" menu item to detect and load the latest update.
|The 3.2.0 DV will run on IPS devices with TOS v3.2.0 and above, all NGFW and all TPS systems. The 4.0.0 DV will only run on the Virtual Threat Protection System (vTPS) appliance.|
Please note that vTPS does not currently support pre-disclosed ZDI filters.
|The Digital Vaccine can be manually downloaded from the following URLs:|
Table of Contents
Modified Filters (logic changes)
Modified Filters (metadata changes only)
33894: HTTP: Microsoft Internet Explorer Scripting Engine Use-After-Free Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a use-after-free vulnerability in Microsoft Internet Explorer. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2018-8653 Modified Filters (logic changes): None Modified Filters (metadata changes only): None Removed Filters: 33762: HTTP: Adobe Acrobat Reader Security Bypass Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after.Top of the Page