[Snort-sigs] Sourcefire VRT Certified Snort Rules Update 2014-09-09
research at ...435...
Tue Sep 9 13:51:40 EDT 2014
-----BEGIN PGP SIGNED MESSAGE-----
Sourcefire VRT Certified Snort Rules Update
The VRT is aware of vulnerabilities affecting products from Microsoft
Microsoft Security Bulletin MS14-052:
Internet Explorer suffers from programming errors that may lead to
remote code execution.
Previously released rules will detect attacks targeting these
vulnerabilities and have been updated with the appropriate reference
information. They are included in this release and are identified with
GID 1, SIDs 29821 through 29822, and 30110 through 30113.
New rules to detect attacks targeting these vulnerabilities are also
included in this release and are identified with GID 1, SIDs 31782
through 31791, 31794 through 31797, 31799 through 31802, and 31809
The VRT has added and modified multiple rules in the blacklist,
browser-ie, exploit-kit, file-office, indicator-compromise and
server-webapp rule sets to provide coverage for emerging threats from
For a complete list of new and modified rules please see:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the Snort-sigs