Norton Internet Security - Security Update 185

Description

Use the LiveUpdate feature of this product to download the security update.

LiveUpdate Defs ID

20091211.001

Security Update 185 adds coverage for the following vulnerabilities and threats:

Name	Severity	BID
HTTP uTorrent Announce File Buffer Overflow	High	22530
HTTP Adobe BMP Image Header BO	High	28874
HTTP Adobe JBIG2Decode BO	High	33751
HTTP VLC Media Player BO	High	32125
TCP VRTSWeb Remote Code Exec	High
HTTP Liberty Toolkit Activity	High
HTTP Windows Media ASF Code Exec	High
MSRPC LSASS NTLM Authority DOS	High	36593
HTTP Fake AV Install Request 4	High
HTTP FakeAV Redirect Request	High
HTTP Fragus Toolkit Activity 2	High
HTTP Gumblar Activity	High
HTTP Koobface C&C Communication (Generic)	High
IKE SafeNet SoftRemote Service BO	High	35154
HTTP CashInstaller Trojan Activity	High
HTTP Fake Scan Webpage 4	High
HTTP Fake Scan Webpage 5	High
HTTP IE Style Heap Spray BO	High	35707, 37085
HTTP W32 QakBot File Download Activity	High
FTP W32.Qakbot Activity	High
HTTP Adobe Illustrator Buffer Overflow	High	37192
MSIE Fake Antivirus Scan Web Page	High

Security Update 185 provides updated coverage for the following vulnerabilities and threats:

Name	Severity	BID
MSRPC DCOM RPC Heap BO (1)	High	8459
MSRPC DCOM RPC Heap BO (2)	High	8459
MS RPC Workstation Service BO (UDP)	High	9011
HTTP MovieMaker ComObj CodeExec (CLSID)	High	18328
HTTP Winzip ActiveXControl KillBit	High	21060
TFTP Generic Filename Exploit BO	High	5328, 10526, 11944, 13821, 19925, 20131, 21148, 21320, 21322, 22923, 23327, 28270
HTTP RIM Blackberry TeamOn Import BO	High	23331
HTTP Kaspersky Kl File Exfilt Inst.	High	23345
HTTP Kaspersky Sysinfo File Exfilt Inst.	High	23325
HTTP MS Speech COM Object Mem Corruption	High	24426
HTTP Mediasups Activity	High
HTTP MSIE TLI App ActiveX Code Exec	High	25289
HTTP MS VB PD Wizard ActiveX Code Exec	High	25295
HTTP Intuit QuickBooks Online ActiveX BO	High	25544
HTTP MS Outlook ActiveX IE DoS	High	21649
HTTP Rediff Toolbar ActiveX DoS	High	21924
HTTP MS XML Core Services Info Disc	High	20339
HTTP MS Visual Foxpro Cmd Exec	High	25977, 27199, 27205
HTTP MSIE COM Object Memory Corruption	High	15061
HTTP Suspicious Executable Image Download	High
HTTP Malicious Toolkit Download Request	High	35759
HTTP MS Speech API ActiveX	High	29556
HTTP BackWeb ActiveX KillBit	High	29558
HTTP Misleading Application Detection	High
HTTP Fake Codec Request (2)	High
HTTP Acrobat Suspicious Executable File Download	High	27641, 30035, 34169, 34736
HTTP Suspicious Executable File Download 2	High
HTTP CSS PE Download	High
HTTP Symantec WinFax Pro ActiveX Invalid Instantiation	High	34766
HTTP Trojan Vundo File Download	High
HTTP Malicious Toolkit Variant Activity 8	High	35759
HTTP Koobface Install File Download Request	High
HTTP Trojan Zbot Domain	High
HTTP Misleading Application File Download	High
HTTP Sun Java Calendar Deserialization Priv Escalation	High	32608
HTTP MS MPEG2TuneRequestControl ActiveX Instantiation	High	35558
HTTP Malicious Toolkit IFrame Injection	High
HTTP Misleading Application Download Request	High
HTTP Fake AV Redirect Request 1	High
HTTP Cashboom Trojan Activity	High
HTTP Fake Scan Webpage 3	High
HTTP Fake AV Redirect Request 2	High
HTTP ActivePDF WebGrabber ActiveX BO	High
HTTP Koobface C&C Update Communication	High
HTTP Koobface C&C Server Domains Request	High
MSIE Adobe Reader GetIcon BO	High	34169

Security Update 185 removes coverage for the following vulnerabilities and threats:

Name	Severity	BID
HTTP MS ACF Parsing Code Exec	High

Note: In addition to signature updates mentioned above (if any) all Security Updates published by Symantec contain updated control data for the Norton Community Watch program, and refreshed metadata for existing signature sets.

Last modified on: December 14, 2009 5:34:31 PM PST