Security Advisory: August 9, 2011

»Top Protections

Check Point Provides Preemptive Protection Against Critical Internet Explorer Vulnerability
( MS11-057, CVE-2011-1963, CVE-2010-2558 )
A memory corruption vulnerability has been reported in Internet Explorer. A remote attacker can leverage this vulnerability to execute arbitrary code on a targeted system. Check Point's IPS Software Blade and NGX SmartDefense provide network protection against this vulnerability by detecting and blocking the transferal of malicious XSL files over HTTP. Learn More .

Critical Vulnerability Discovered in Microsoft Data Access Components
( Microsoft Security Bulletin MS11-057, CVE-2011-1975 )
An insecure library loading vulnerability has been reported in Microsoft Data Access Components. A remote attacker could exploit this vulnerability and take complete control of the affected system. Check Point's IPS Software Blade and NGX SmartDefense provide network protection by detecting and blocking the transferal of suspicious DLL files over CIFS and WebDAV. Learn More .

Check Point IPS Provides Protection Against Four Microsoft Internet Explorer Vulnerabilities
( Microsoft Security Bulletin MS11-057 )
Four vulnerabilities in Internet Explorer have been disclosed by Microsoft — one ranked Critical in severity, and three ranked High. Check Point's IPS Software Blade provides immediate network protection for unpatched systems against all of these issues by detecting and blocking attempts to exploit them. Learn More .

August 9, 2011

In This Advisory
Top Protections
•	Check Point Provides Preemptive Protection Against Critical Internet Explorer Vulnerability
•	Critical Vulnerability Discovered in Microsoft Data Access Components
•	Check Point IPS Provides Protection Against Four Microsoft Internet Explorer Vulnerabilities
Highlighted Protections
•	Including Patch Tuesday

» Highlighted Protections

This table lists Check Point protections for recently disclosed threats. In some cases, Check Point protections against such threats or threat types have been available for some time, and the date listed is the date when the protection became available.

Severity	Vulnerability Description	Check Point Protection Issued	Industry Reference	Check Point Reference Number
Critical	Preemptive Protection against Internet Explorer XSLT Object Memory Corruption	10-Apr-2010	CVE-2011-1963 CVE-2010-2558	CPAI-2011-370
Critical	Microsoft Windows DNS Server NAPTR Response Code Execution	09-Aug-2011	CVE-2011-1966	CPAI-2011-369
Critical	Microsoft Internet Explorer Style Object Memory Corruption	09-Aug-2011	CVE-2011-1964	CPAI-2011-359
Critical	Microsoft Office Visio UMLString Code Execution	09-Aug-2011	CVE-2011-1971	CPAI-2011-367
Critical	Microsoft Windows CSRSS SrvDeviceEvent Code Execution	09-Aug-2011	CVE-2011-1967	CPAI-2011-366
Critical	Microsoft Windows NDISTAPI Code Execution	09-Aug-2011	CVE-2011-1974	CPAI-2011-365
Critical	Microsoft Terminal Services Remote Denial Of Service	09-Aug-2011	CVE-2011-1968	CPAI-2011-364
Critical	Microsoft Data Access Components Insecure Library Loading	09-Aug-2011	CVE-2011-1975	CPAI-2011-360
High	Microsoft Report Viewer TimeMethod Information Disclosure	09-Aug-2011	CVE-2011-1976	CPAI-2011-368
High	Microsoft ASP.NET Chart Control Information Disclosure	09-Aug-2011	CVE-2011-1977	CPAI-2011-362
High	Microsoft Remote Desktop Web Access Cross-Site Scripting	09-Aug-2011	CVE-2011-1263	CPAI-2011-361
High	Microsoft Internet Explorer Window Open Race Condition	09-Aug-2011	CVE-2011-1257	CPAI-2011-358
High	Microsoft Internet Explorer Cross Domain Information Disclosure	09-Aug-2011	CVE-2011-1960	CPAI-2011-357
High	Microsoft Internet Explorer Telnet Handler Remote Code Execution	09-Aug-2011	CVE-2011-1961	CPAI-2011-356
High	Microsoft Office Visio UML Parsing Use After Free Code Execution	09-Aug-2011	CVE-2011-1972	CPAI-2011-355

More Updates >

Have questions about IPS?
Participate in the IPS User Forum. The IPS Forum is your space for asking questions regarding all IPS features, and to collaborate with other IPS users, worldwide, on IPS related issues. Check Point employees may monitor the forum and provide information on the issues posted.

Know someone who should be getting the Advisories?

» About the Check Point Update Services
Check Point provides ongoing and real-time updates and configuration information through an update service included with the relevant subscriptions. Updates from Check Point's global Research and Response Centers increase the value of your Check Point products, and minimize threats by providing defenses that can be used before vendor patches are applied throughout your network. For more information, visit www.CheckPoint.com.

Archived Check Point Security Advisories