DB Version:
4.270
Num New:
3
New:
App.Control.Signature.Test^low
Apple.QuickTime.TeXML.Style.Element.Text.Buffer.Overflow^critical
HP.Diagnostics.magentservice.exe.Stack.Buffer.Overflow^critical
Num Enhanced:
16
Enhanced:
Adobe.Acrobat.PDF.RMA.Object.Array.Handling.Memory.Corruption^critical
Adobe.Photoshop.CS.U3D.8BI.Collada.Asset.Element.Stack.Overflow^high
Adobe.Reader.Well-Known.Text.String.Buffer.Overflow^high
CitectSCADA.ODBC.Server.Stack.Buffer.Overflow^high
Digium.Asterisk.HTTP.Digest.Authentication.Buffer.Overflow^critical
Eicar.Virus.Test.File^info
HTTP.Server.Backslash.Character.Directory.Traversal^medium
MS.Anti.XSS.Library.Bypass.Information.Disclosure^high
MS.Excel.SST.Invalid.Length.Use.After.Free^high
MS.Win32k.TrueType.Parsing.Code.Execution^critical
MS.Windows.Media.MIDI.Remote.Code.Execution^critical
Oracle.Java.Applet.AccessControlContext.Privilege.Elevation^critical
Oracle.Secure.Backup.Observiced.Code.Execution^high
Oracle.WebCenter.Forms.Sssplt30.ActiveX.Control.File.Creation^medium
PDF.With.Launch.Action^medium
RealNetworks.Helix.Server.NTLM.Authentication.Code.Execution^critical
Num Renamed:
2
Renamed:
Adobe.Flash.Player.DefineButton.Tag.Handling.Memory.Corruption^Previous name: "Adobe.Flash.Player.DefineButton.tag.Handling.Memory.Corruption"
MS.Office.Picture.Manager.2010.DoS^Previous name: "Microsoft.Office.Picture.Manager.2010.DoS"
Num Deprecated:
1
Deprecated:
Kudrsoft.AudioPLUS.Playlist.Buffer.Overflow^high
Num Attribute Changed:
50
Attribute Changed:
Adobe.Acrobat.Texture.Declaration.Object.Stack.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
Adobe.Flash.Player.copyRawDataTo.Memory.Corruption^Default_action updated to 'drop' from 'pass'
Adobe.Flash.Player.OpenType.Font.Integer.Overflow^Default_action updated to 'drop' from 'pass'
Adobe.Reader.Well-Known.Text.String.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
Adobe.Reader.XSLT.Stylesheet.Processing.Code.Execution^Default_action updated to 'drop' from 'pass'
BeyondCHM.CHM.File.Parsing.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
Cisco.AnyConnect.VPN.Client.Software.Security.Bypass^Default_action updated to 'drop' from 'pass'
Cisco.Linksys.PlayerPT.ActiveX.SetSource.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
Citrix.Acess.Gateway.nsepacom.ActiveX.Control.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
CuteFlow.Preauthenticated.Admin.Account.Creation^Default_action updated to 'drop' from 'pass'
CuteFlow.Unauthorized.User.php.File.Upload^Default_action updated to 'drop' from 'pass'
Cyclope.Employee.Surveillance.Solution.SQL.Injection^Default_action updated to 'drop' from 'pass'
EMC.AutoStart.ftAgent.exe.Multiple.Integer.Overflow^Default_action updated to 'drop' from 'pass'
ESVA.CGI.Command.Injection^Default_action updated to 'drop' from 'pass'
Flexera.Multiple.Products.ISGrid.dll.ActiveX.Code.Execution^Default_action updated to 'drop' from 'pass'
GE.Proficy.Historian.KeyHelp.ActiveX.Control.Code.Execution^Default_action updated to 'drop' from 'pass'
GE.Proficy.Real-Time.Information.Portal.Directory.Traversal^Default_action updated to 'drop' from 'pass'
HP.Application.Lifecycle.Management.ActiveX.File.Overwrite^Default_action updated to 'drop' from 'pass'
HP.Intelligent.Management.Center.uam.exe.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
HP.Openview.NNM.ovlogin.exe.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
HP.SiteScope.SOAP.Call.Multiple.Vulnerabilities^Default_action updated to 'drop' from 'pass'
IBM.Lotus.Notes.URI.Scheme.Handling.Command.Execution^Default_action updated to 'drop' from 'pass'
ISC.DHCP.Server.DUID.Handling.Stack.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
iSCSI.Enterprise.Target.Format.String^Default_action updated to 'drop' from 'pass'
Kingview.Network.Based.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
MS.IE.execCommand.Use.After.Free^Default_action updated to 'drop' from 'pass'
MS.Remote.Administration.Protocol.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
MS.Remote.Administration.Protocol.DoS^Default_action updated to 'drop' from 'pass'
MS.SCCM.XSS^Default_action updated to 'drop' from 'pass'
MS.Visio.DXF.File.Handling.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
MS.Visual.Studio.Team.Server.Foundation.Multiple.XSS^Default_action updated to 'drop' from 'pass'
Novell.Groupwise.WebAccess.User.Interface.Directory.Traversal^Default_action updated to 'drop' from 'pass'
Novell.Remote.Manager.Off-by-One.DoS^Default_action updated to 'drop' from 'pass'
Novell.ZENworks.Asset.Management.Remote.Execution^Default_action updated to 'drop' from 'pass'
Oracle.Business.Transaction.Mngt.Srvr.SOAP.Request.Auth.Bypass^Default_action updated to 'drop' from 'pass'
Oracle.Fusion.Middleware.Outside.In.Excel.File.Parsing.Integer^Default_action updated to 'drop' from 'pass'
PHP.IRC.Bot.Remote.Code.Execution^Default_action updated to 'drop' from 'pass'
Power.Media.asz.File.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
QNX.Phindows.bpe.decompress.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
Quick.Post.Widget.Plugin.XSS^Default_action updated to 'drop' from 'pass'
SAP.NetWeaver.SOAP.Arbitrary.Command.Execution^Default_action updated to 'drop' from 'pass'
SkinCrafter.InitLicenKeys.Function.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
Symantec.Web.Gateway.languagetest.php.File.Inclusion^Default_action updated to 'drop' from 'pass'
Sysax.Multi.Server.Create.Folder.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
TestLink.Arbitrary.PHP.File.Upload^Default_action updated to 'drop' from 'pass'
Total.Video.Player.Media.File.Buffer.Overflow^Default_action updated to 'drop' from 'pass'
WAN.Emulator.Command.Execution^Default_action updated to 'drop' from 'pass'
WebPageTest.Arbitrary.PHP.File.Upload^Default_action updated to 'drop' from 'pass'
Zabbix.Server.Arbitrary.Command.Execution^Default_action updated to 'drop' from 'pass'
Zenoss.showDaemonXMLConfig.Command.Execution^Default_action updated to 'drop' from 'pass'