Security Advisory: June 14, 2011

»Top Protections

Check Point IPS Protects Against Nine Vulnerabilities Discovered in Microsoft Internet Explorer
( Microsoft Security Bulletin MS11-050 )
Nine vulnerabilities have been discovered in Microsoft Internet Explorer. A remote attacker could exploit any one of these vulnerabilities by constructing a specially crafted Web page that takes advantage of it. The Check Point IPS Software Blade provides immediate network protection against all of these issues in the latest IPS update. Learn More .

Check Point IPS Protects Against Seven Microsoft Excel Vulnerabilities
( Microsoft Security Bulletin MS11-045 ) Seven remote code execution vulnerabilities have been discovered in Microsoft Excel. A remote attacker could exploit any of these issues to take complete control of a targeted system. The latest update for the Check Point IPS Software Blade provides immediate network protection against all of these issues. Learn More .

Critical Adobe Flash Player Cross-Site Scripting Vulnerability
( Adobe APSB11-13 ) A critical cross site scripting vulnerability has been reported in Adobe Flash Player. Successful exploitation of this vulnerability could allow the attacker to execute a cross-site scripting attack on the user, allowing the attacker to execute script content in the user's security context. Check Point's IPS Software Blade provides immediate network protection in the latest IPS update. Learn More .

June 14, 2011

In This Advisory
Top Protections
•	Check Point IPS Protects Against Nine Vulnerabilities Discovered in Microsoft Internet Explorer
•	Check Point IPS Protects Against Seven Microsoft Excel Vulnerabilities
•	Critical Adobe Flash Player Cross-Site Scripting Vulnerability
Deployment Tip
•	Check for Updates when SmartDashboard is Open
Highlighted Protections
•	Including Patch Tuesday

Deployment Tip
Check for Updates when SmartDashboard is Open

SmartDashboard has an option that will enable checking for updates while the application is open. On the IPS tab, select Download Updates to view/change this option.

SmartDashboard image

» Highlighted Protections

This table lists Check Point protections for recently disclosed threats. In some cases, Check Point protections against such threats or threat types have been available for some time, and the date listed is the date when the protection became available.

Severity	Vulnerability Description	Check Point Protection Issued	Industry Reference	Check Point Reference Number
Critical	Microsoft Windows DFS PathConsumed Code Injection	11-Jun-2011	CVE-2011-1868	CPAI-2011-309
Critical	Microsoft .NET Framework Arbitrary Code Execution	12-Jun-2011	CVE-2011-0664	CPAI-2011-297
Critical	Microsoft SMB Create Response Remote Code Execution	11-Jun-2011	CVE-2011-1268	CPAI-2011-296
Critical	Microsoft Windows ATMFD Font Driver OTF Code Execution	11-Jun-2011	CVE-2011-1873	CPAI-2011-294
Critical	Microsoft XML Editor External Entities Resolution Vulnerability	11-Jun-2011	CVE-2011-1280	CPAI-2011-288
Critical	Internet Explorer Redirect CDL Protocol Memory Corruption	12-Jun-2011	CVE-2011-1262	CPAI-2011-299
Critical	Internet Explorer HTML Null Element Memory Corruption	12-Jun-2011	CVE-2011-1251	CPAI-2011-300
Critical	Internet Explorer Link Properties Handling Memory Corruption	12-Jun-2011	CVE-2011-1250	CPAI-2011-301
Critical	Internet Explorer Handling Layout Memory Corruption	12-Jun-2011	CVE-2011-1254	CPAI-2011-302
Critical	Microsoft Excel Memory Heap Overwrite Vulnerability	10-Jun-2011	CVE-2011-1275	CPAI-2011-286
Critical	Microsoft Excel SLK File Parsing code execution	11-Jun-2011	CVE-2011-1276	CPAI-2011-289
Critical	Microsoft Office Excel SELECTION Record Out Of Boundary	11-Jun-2011	CVE-2011-1277	CPAI-2011-291
Critical	Microsoft Office Excel XF BIFF Record Out Of Boundary	11-Jun-2011	CVE-2011-1279	CPAI-2011-292

More Updates >

Have questions about IPS?
Participate in the IPS User Forum. The IPS Forum is your space for asking questions regarding all IPS features, and to collaborate with other IPS users, worldwide, on IPS related issues. Check Point employees may monitor the forum and provide information on the issues posted.

Know someone who should be getting the Advisories?

» About the Check Point Update Services
Check Point provides ongoing and real-time updates and configuration information through an update service included with the relevant subscriptions. Updates from Check Point's global Research and Response Centers increase the value of your Check Point products, and minimize threats by providing defenses that can be used before vendor patches are applied throughout your network. For more information, visit www.CheckPoint.com.

Archived Check Point Security Advisories