CVE-2015-0310

[tac.in]

Model# of the device: PA-5020

Serial# of the device: 0011C103358

Current PANOS version: 5.0.4

Customer requires information that whether CVE-2015-0310 will have an impact on the PANOS version or not and if yes then is there any patch available?

An exploit for CVE-2015-0310 exists in the wild, which is being used in attacks against older versions of Flash Player.

[HULK]

Hello tac.in,

PAN is having coverage for below mentioned threat ID.

TID: 1270152

TID: 1270151

TID: 1270170

We will add IPS signatures with content database version 483, along with coverage for CVE-2015-0311.

Hope this helps.

Thanks

[tac.in]

Hello Hulk

Thanks for the reply.

The threat IDs that you have mentioned, Is it related to the vulnerability CVE-2015-0311?

It would be good if you can provide some more details on the three TID.

[HULK]

Hello Tac.in,

The above mentioned  vulnerability CVE-2015-0310 is related to adobe flash file. Hence, those TID's are for CVE-2015-0310.

Virus/Win32.generic.jqwhx

Signature ID: 1270152

Content Release: 1473 (1/27/2015)

Signature Type: Virus

Virus/Win32.generic.jqwhg

Signature ID: 1270151

Content Release: 1473 (1/27/2015)

Signature Type: Virus

Virus/Win32.generic.jqwfx

Signature ID: 1270170

Content Release: 1473 (1/27/2015)

Signature Type: Virus

Hope this helps.

Thanks

[tac.in]

Thanks I also got the same details from the Threat vault.

[pulukas]

The important concept here is that your protection for threats is based on your Threat database or AV database version NOT the PanOS version.  You check these on the device tab in the dynamic updates option.

And as you saw, the best place to verify coverage is on the Threat vault search for the CVE number.