Internet Explorer 0 Day - Sept 17, 2012

Reply
Highlighted
L3 Networker

Internet Explorer 0 Day - Sept 17, 2012

Is there a signature for the new IE 0 day yet?

There is a metasploit module out so.. that means there a working exploit 'in the wild' to base a sig on...

Normally I find the CVE and then look it up in Threat Vault which will give me the threats version number (eg: 839-1155) that I can confirm is installed on my FW.

However this time, I cant find a CVE number so Im asking here.

Thanks


Accepted Solutions
L4 Transporter

Re: Internet Explorer 0 Day - Sept 17, 2012

We will be releasing a signature in this evenings content update329 with threat id's 35017 and 35018

View solution in original post


All Replies
L4 Transporter

Re: Internet Explorer 0 Day - Sept 17, 2012

We will be releasing a signature in this evenings content update329 with threat id's 35017 and 35018

View solution in original post

Highlighted
L3 Networker

Re: Internet Explorer 0 Day - Sept 17, 2012

thanks!

Highlighted
L2 Linker

Re: Internet Explorer 0 Day - Sept 17, 2012

Has this update been made generally available yet?

Jason

Highlighted
L1 Bithead

Re: Internet Explorer 0 Day - Sept 17, 2012

I received the release notes of update 329 already. But we don not get the update itself... We tried with manual download and with scheduled download on the firewall. But the latest we get is 328? When will the 329 be available for download?


Highlighted
L6 Presenter

Re: Internet Explorer 0 Day - Sept 17, 2012

The update mail arrived 8 hours ago but I still dont see it in the dynamic updates section at https://support.paloaltonetworks.com (when logged in) - only previous versions (328 and older) is currently available.

Highlighted
L4 Transporter

Re: Internet Explorer 0 Day - Sept 17, 2012

Same here, Content update 329 was announced through email, but it's still not available on the support download page nor through the automatic update of the Firewall.

Our customers are waiting since the latest IE vuln. CVE-2012-4969 makes quite some noise in the media.

Highlighted
L0 Member

Re: Internet Explorer 0 Day - Sept 17, 2012

Hi everybody,

when looking into the dynamic updates section via https://support.paloaltonetworks.com I do not see update 329, yet. 328 is the latest named one.

In Panorama I do not see availability of 329 as well.

The PA's itself have already updated to 329-1511! Looking into the release news (direct link using webGUI):

https://updates.paloaltonetworks.com/updates/ReleaseNotes.aspx?type=si&versionNumber=329-1511&conten...

https://updates.paloaltonetworks.com/updates/ReleaseNotes.aspx?type=si&versionNumber=329-1511&conten...

Default-action 35017: reset-client

Default-action 35018: alert

Highlighted
L4 Transporter

Re: Internet Explorer 0 Day - Sept 17, 2012

That's hard to believe. I just forced an update check by hitting the check now button on the dyn. updates page of the FW. Still showing 328 as the latest one...

Can you send a screenshot ?

Highlighted
L0 Member

Re: Internet Explorer 0 Day - Sept 17, 2012

PA01.png

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!