topic Re: CVE-2015-0310 in General Topics

CVE-2015-0310

tac.in — Wed, 28 Jan 2015 06:07:55 GMT

Model# of the device: PA-5020

Serial# of the device: 0011C103358

Current PANOS version: 5.0.4

Customer requires information that whether CVE-2015-0310 will have an impact on the PANOS version or not and if yes then is there any patch available?

An exploit for CVE-2015-0310 exists in the wild, which is being used in attacks against older versions of Flash Player.

Re: CVE-2015-0310

HULK — Wed, 28 Jan 2015 06:29:32 GMT

Hello tac.in,

PAN is having coverage for below mentioned threat ID.

TID: 1270152

TID: 1270151

TID: 1270170

We will add IPS signatures with content database version 483, along with coverage for CVE-2015-0311.

Hope this helps.

Thanks

Re: CVE-2015-0310

tac.in — Wed, 28 Jan 2015 07:11:09 GMT

Hello Hulk

Thanks for the reply.

The threat IDs that you have mentioned, Is it related to the vulnerability CVE-2015-0311?

It would be good if you can provide some more details on the three TID.

Re: CVE-2015-0310

HULK — Wed, 28 Jan 2015 07:24:31 GMT

Hello Tac.in,

The above mentioned vulnerability CVE-2015-0310 is related to adobe flash file. Hence, those TID's are for CVE-2015-0310.

Virus/Win32.generic.jqwhx

Signature ID: 1270152

Content Release: 1473 (1/27/2015)

Signature Type: Virus

Virus/Win32.generic.jqwhg

Signature ID: 1270151

Content Release: 1473 (1/27/2015)

Signature Type: Virus

Virus/Win32.generic.jqwfx

Signature ID: 1270170

Content Release: 1473 (1/27/2015)

Signature Type: Virus

Hope this helps.

Thanks

Re: CVE-2015-0310

tac.in — Wed, 28 Jan 2015 07:50:00 GMT

Thanks I also got the same details from the Threat vault.

Re: CVE-2015-0310

pulukas — Wed, 28 Jan 2015 11:27:08 GMT

The important concept here is that your protection for threats is based on your Threat database or AV database version NOT the PanOS version. You check these on the device tab in the dynamic updates option.

And as you saw, the best place to verify coverage is on the Threat vault search for the CVE number.