Here's an article written in Computer World, about NFR's ability to
protect against the WMF exploit.
http://computerworld.com.sg/ShowPage.aspx?pagetype=2&articleid=3265&pubid=3&issueid=78
<http://computerworld.com.sg/ShowPage.aspx?pagetype=2&articleid=3265&pubid=3&issueid=78>
Customers running our badfiles package have been protected since
November I believe.
thanks,
dave
Haseeb Abdali wrote:
> Cisco claims that its Cisco Security Agent (CSA) can be used for WMF
> protection. Specifically CSA version 4.0.3.736 and above is protected.
>
> Haseeb
> ----- Original Message ----- From: "Sam Evans" <wintrmte_at_gmail.com>
> To: <focus-ids_at_securityfocus.com>
> Sent: Wednesday, January 04, 2006 4:43 PM
> Subject: WMF and IPS products?
>
>
>> I am curious if any of the major IPS vendors are able to successfully
>> protect workstations from downloading malicious WMF content?
>>
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from
> CORE IMPACT.
> Go to
> http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
> learn more.
> ------------------------------------------------------------------------
>
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
Received on Jan 10 2006