Zero-day vulnerability in Adobe Flash, CVE-2015-0313

Retired Member — Mon, 02 Feb 2015 23:33:03 GMT

Vulnerability Coverage:

Wildfire AV - WF 52532 (today) (PAN-OS 5.0+), and AV 1478 (tomorrow). Virus/Win32.CVE-2015-0313.a

IPS Signature- Planning to release with 2/3 IPS signature release

URLs associated with Malicious SWF samples:

Malicious domains added to PAN-DB/malware already (PAN-OS 5.0 +)

CnC/Spyware:

Malicious DNS signatures added for domains associated with malicious samples (PAN-OS 5.0+)

WildFire:

Forward SWF flash files to Wildfire for analysis.

Traps Advanced Endpoint Protection:

Traps was able to mitigate the last zero-day vulnerability. Palo Alto Networks has not confirmed this yet.

Other mitigations:

Investigate removing Adobe Flash if not required. YouTube is now moving to html5 so more sites will continue to follow.

Re: Zero-day vulnerability in Adobe Flash, CVE-2015-0313

mivaldi — Thu, 05 Feb 2015 20:07:57 GMT

Vuln Protection was added with Apps+Threats Content package 484

On Release Notes, New Vulnerability Signature:

Threat ID 37364

Adobe Flash Player Memory Corruption Vulnerability

CVE-2015-0313