IDS: RE: WMF and IPS products?

["Alan Shimel" <ashimel () stillsecure com>]

Guys

So have we at StillSecure as well as most of the IPS's vendors

alan

Alan Shimel
Chief Strategy Officer
StillSecure
http://www.stillsecure.com
(  303.381.3815
þ  516.857.7409
Ê 303.381.3881
* ashimel () stillsecure com
 http://ashimmy.typepad.com
 
. . .
The information transmitted is intended only for the person
to whom it is addressed and may contain confidential material.
Review or other use of this information by persons other than
the intended recipient is prohibited. If you've received
this in error, please contact the sender and delete
from any computer. 

-----Original Message-----
From: Mike Barkett [mailto:mbarkett () nfr com] 
Sent: Thursday, January 05, 2006 7:43 PM
To: 'Sam Evans'; focus-ids () securityfocus com
Subject: RE: WMF and IPS products?

Sam -

NFR Sentivist has protected against this and its variants for several weeks
(0-day, as they say), and we have just updated our signature set to be even
more precise.  Here's the marketing goo on it:

http://www.nfr.com/news/detail.php?id=398

http://computerworld.com.sg/ShowPage.aspx?pagetype=2&articleid=3265&pubid=3&;
issueid=78


-MAB


> -----Original Message-----
> From: Sam Evans [mailto:wintrmte () gmail com]
> Sent: Wednesday, January 04, 2006 5:43 PM
> To: focus-ids () securityfocus com
> Subject: WMF and IPS products?
>
> I am curious if any of the major IPS vendors are able to successfully
> protect workstations from downloading malicious WMF content?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------