RE: WMF and IPS products?



Hi Sam,

I am not sure what you are referring to with "protecting from
downloading malicious WMF content". The most proper way to do it would
be through signature based systems and it is known fact that all the
signature based systems were bypassed during this and other similar
vulnerabilities.

You will see that Determina VPS Memory Firewall technology provides
zero-day protection for this vulnerability, preventing the end systems
from running any single instruction of the malicious code on the
affected system.

Please check out our web site at www.determina.com for more technical
info and product details

Thanks,
Murat

-----Original Message-----
From: Sam Evans [mailto:wintrmte@xxxxxxxxx]
Sent: Wednesday, January 04, 2006 2:43 PM
To: focus-ids@xxxxxxxxxxxxxxxxx
Subject: WMF and IPS products?

I am curious if any of the major IPS vendors are able to successfully
protect workstations from downloading malicious WMF content?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------



Relevant Pages

  • Re: Macros Security
    ... He never asked about protecting his code. ... developer and implied he wanted his code to open with a macro prompt. ... > any Excel product that only has a digital signature. ...
    (microsoft.public.excel.programming)
  • Re: How do you save protected documents as PDF?
    ... forms are useful for protecting the formatting and ... I agree protecting a form has no bearing on ... > The whole point of the replies was that password protecting the signature is ... > Word MVP web site http://word.mvps.org ...
    (microsoft.public.word.docmanagement)
  • Re: Protecting a form once completed so as others cannot edit
    ... If you think that protecting a signature inserted as a graphic will stop ... Word MVP web site http://word.mvps.org ...
    (microsoft.public.word.docmanagement)