Symantec Endpoint Protection - Security Update 126

Description

LiveUpdate Defs ID

Security Update 126 adds coverage for the following vulnerabilities and threats:

Name	Severity	BID
HTTP uTorrent Announce File Buffer Overflow	High	22530
VNC Large Error Response BO	High	2305, 17378
HTTP Adobe BMP Image Header BO	High	28874
HTTP Adobe JBIG2Decode BO	High	33751
HTTP VLC Media Player BO	High	32125
TCP VRTSWeb Remote Code Exec	High
HTTP Liberty Toolkit Activity	High
HTTP Windows Media ASF Code Exec	High
MSRPC LSASS NTLM Authority DOS	High	36593
HTTP Fake AV Install Request 4	High
HTTP FakeAV Redirect Request	High
HTTP Fragus Toolkit Activity 2	High
HTTP Gumblar Activity	High
HTTP Koobface C&C Communication (Generic)	High
IKE SafeNet SoftRemote Service BO	High	35154
TCP SAP Business One License Manager BO	High	35933
TCP InterSystems Cache BO	High
HTTP CashInstaller Trojan Activity	High
HTTP Fake Scan Webpage 4	High
HTTP Fake Scan Webpage 5	High
HTTP IE Style Heap Spray BO	High	35707, 37085
HTTP W32 QakBot File Download Activity	High
FTP W32.Qakbot Activity	High
HTTP Adobe Illustrator Buffer Overflow	High	37192

Security Update 126 provides updated coverage for the following vulnerabilities and threats:

Name	Severity	BID
MSRPC DCOM RPC Heap BO (1)	High	8459
MSRPC DCOM RPC Heap BO (2)	High	8459
P2P eMule Hello	Medium
Emule File Traffic Detected	Medium
MS RPC Workstation Service BO (UDP)	High	9011
P2P Emule Kademlia Request	Medium
HTTP MovieMaker ComObj CodeExec (CLSID)	High	18328
HTTP Winzip ActiveXControl KillBit	High	21060
TFTP Generic Filename Exploit BO	High	5328, 10526, 11944, 13821, 19925, 20131, 21148, 21320, 21322, 22923, 23327, 28270
HTTP RIM Blackberry TeamOn Import BO	High	23331
HTTP Kaspersky Kl File Exfilt Inst.	High	23345
HTTP Kaspersky Sysinfo File Exfilt Inst.	High	23325
HTTP MS Speech COM Object Mem Corruption	High	24426
HTTP Novell Extend Dir ActiveX Comm Exec	High	24493
HTTP Mediasups Activity	High
HTTP MSIE TLI App ActiveX Code Exec	High	25289
HTTP MS VB PD Wizard ActiveX Code Exec	High	25295
HTTP Intuit QuickBooks Online ActiveX BO	High	25544
HTTP MS Outlook ActiveX IE DoS	High	21649
HTTP Rediff Toolbar ActiveX DoS	High	21924
HTTP MS XML Core Services Info Disc	High	20339
HTTP MS Visual Foxpro Cmd Exec	High	25977, 27199, 27205
HTTP MSIE COM Object Memory Corruption	High	15061
HTTP Suspicious Executable Image Download	High
HTTP HxTocCtrl ActiveX Code Exec	High	28606
HTTP Malicious Toolkit Download Request	High	35759
HTTP MS Speech API ActiveX	High	29556
HTTP BackWeb ActiveX KillBit	High	29558
HTTP Misleading Application Detection	High
HTTP Fake Codec Request (2)	High
HTTP Suspicious Executable File Download 2	High
TCP Suspicious Trojan Remote Administration Tool	High
P2P Downadup Activity	High
HTTP CSS PE Download	High
HTTP Symantec WinFax Pro ActiveX Invalid Instantiation	High	34766
HTTP Trojan Vundo File Download	High
HTTP Koobface Install File Download Request	High
HTTP Misleading Application File Download	High
HTTP Sun Java Calendar Deserialization Priv Escalation	High	32608
HTTP MS MPEG2TuneRequestControl ActiveX Instantiation	High	35558
HTTP Malicious Toolkit IFrame Injection	High
HTTP Misleading Application Download Request	High
HTTP Cashboom Trojan Activity	High
HTTP Fake Scan Webpage 3	High
HTTP Fake AV Redirect Request 2	High
HTTP ActivePDF WebGrabber ActiveX BO	High
HTTP Koobface C&C Server Domains Request	High

Security Update 126 removes coverage for the following vulnerabilities and threats:

Name	Severity	BID
HTTP MS ACF Parsing Code Exec	High