topic Re: Exploit:Win32/Pdfjsc.ABS will not recognized in General Topics

Exploit:Win32/Pdfjsc.ABS will not recognized

mhuels — Mon, 11 Jun 2012 10:17:21 GMT

The new PDF Exploit "Pdfjsc.ABS", which travels with a lot of Emails (for instance: "Here is the new Elster program" - Elster is the name of a german tax program), will not recognized by PAN-Firewall. Neither on Email nor on Webtraffic, so i can attache the virus on this thread.

mfg

Manfred

Re: Exploit:Win32/Pdfjsc.ABS will not recognized

ppatel — Tue, 12 Jun 2012 00:05:24 GMT

Hi Manfred,

Thanks for letting us know about the Exploit not getting detected.

I would like you to do is open up a support ticket with Palo Alto Networks via Web.

Submit all the relevant details regarding the virus, along with the packet captures from the test host when you go ahead and download the link.

We do have a lot of Adobe vulnerabilities covered and it might be possible we would have missed one.

Here is the link that contains the list that you woudl be required to submit while opening the support ticket.(According to relevance)

https://live.paloaltonetworks.com/docs/DOC-2769 (The link is to submit false positives but these information also helps our content team modify or add signatures to the existing Database.)

Essential details:

>show system info

>trafic logs

>packet capture from the host when you download PDF

Regards,

Parth

Re: Exploit:Win32/Pdfjsc.ABS will not recognized

mhuels — Tue, 12 Jun 2012 09:42:05 GMT

Hi Parth,

i am sorry. I do not have sufficient rights to generate a ticket on your website. Please do it yourself.

Let me know, if you like to have some additional informations.

regards

Manfred

Re: Exploit:Win32/Pdfjsc.ABS will not recognized

mhuels — Tue, 12 Jun 2012 13:33:48 GMT

again i like to explain, that this PDF Exploit is not the onliest one, which is not detected by IDS in the last weeks.

mfg

Manfred

Re: Exploit:Win32/Pdfjsc.ABS will not recognized

ppatel — Tue, 12 Jun 2012 21:49:28 GMT

Hi Manfred,

If you donot have sufficient rights to open up a ticket on the web, do you happen to know your reseller from whom you purchased the device or Sales Engineer?

If so you can contact them and they can open up a ticket on your behalf and submit all the required details.

If you donot happen to know your Regional sales Engineer, please get in touch with our sales Team at the follwoing E-mail.

Sales Inquiries
US and North America:

contact_sales@paloaltonetworks.com

Regards,

Parth