New SmartDefense Updates

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Greetings,

 
New SmartDefense Updates have been released today, December
30, 2007 for
users of VPN-1 NGX R65, R62, R61, R60, VPN-1 NG R55 &
R54, users of
InterSpect NGX and users of Connectra NGX R62 & R61. 
 

Microsoft DirectX SAMI Files Parsing Code Execution
Protection (MS07-064)
Overview:  A remote code execution vulnerability has been
reported in
Microsoft DirectX. Microsoft DirectX is a set of libraries
that aim for
accelerated video and audio experience on Microsoft Windows
operating
system. DirectX can parse various file formats which include
SAMI files.
Synchronized Accessible Media Interchange (SAMI) files are
text files that
contain the text strings used for synchronized closed
captions, subtitles,
and audio descriptions. A remote attacker can exploit this
vulnerability
via a specially crafted SAMI file. Successful exploitation
of the
vulnerability allows execution of arbitrary code on a
vulnerable system. By
enabling this protection, SmartDefense will detect and block
the
transferring of malformed SAMI files over HTTP.
For more information, refer to CPAI-2007-141 at
http://www.checkpoint.com/defense/advis
ories/public/2007/cpai-23-Dec.html 

Microsoft Windows Media Format ASF Parsing Code Execution
Protection
(MS07-068)
Overview:  Multiple buffer overflow vulnerabilities have
been reported in
Microsoft Windows Media Format Runtime. The Microsoft
Windows Media Format
Runtime provides information and tools for applications that
use Windows
Media content. The core component of Windows Media Format is
the Advanced
Systems Format (ASF). ASF is a file format that stores audio
and video
information and is specially designed to run over networks
like the
Internet. A remote attacker can exploit this vulnerability
via a specially
crafted ASF file. Successful exploitation of the
vulnerability allows
execution of arbitrary code on a vulnerable system. By
enabling this
protection, SmartDefense will detect and block multiple
vulnerabilities in
the ASF file format.
For more information, refer to CPAI-2007-142 at
http://www.checkpoint.com/defense/advi
sories/public/2007/cpai-23-Deca.html

Protections against Recent Malware Threats (18-Dec-07)
Overview:  Malware are software designed to infiltrate or
damage a computer
system without the owner's informed consent. It is a general
name for a
variety of forms of hostile, intrusive, or annoying programs
like Viruses,
worms, Adware, Trojans, and spyware that exploit unprotected
clients, using
network access to intrude upon organizations, destroying or
stealing data.
The update enables the Header Rejection protection and the
HTTP Worm
Catcher to detect and block the malware based on pre-defined
header names
and worm signatures.
For more information, refer to CPAI-2007-143 at
http://www.checkpoint.com/defense/advis
ories/public/2007/cpai-27-Dec.html  


Links to the recent SmartDefense Advisories are available
at:
http://www.checkpoint.com/defense/advisories/pub
lic/summary.html  

Read more about SmartDefense Service at:
http://www.checkpoint.com/defense/advisories/pu
blic/overview.html   

To sign-up to the mailing list, send an email to
listservamadeus.us.checkpoint.com with the text
"SUBSCRIBE
SMARTDEFENSE-NEWS" in the email body.
 
To unsubscribe from this list, send an email to
listservamadeus.us.checkpoint.com with the text
"SIGNOFF
SMARTDEFENSE-NEWS" In the email body. 

As always, please feel free to contact us directly if you
have any comments
or questions (sda-infoCheckPoint.com).  

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wsBVAwUBR3fDRKy7i8j/RTzHAQiP1Qf+ItHPR6CUufKMOaS3qJHhzSN2EGDg
g9Eu
3gKqQ9+4nQqvHxQKjQapzEOP8VN0QQbXomTHUAVOR+syRcXEYYHBcYAG1wsI
E4Po
w/Zwxsevc1Y/H/7TaPIVVidXZa//9L/m+/wYnJEIt3VlboXO2/GlHANpflxc
r18G
3xcsQXBCd5s3qBHl0GWW4ey1OcvO64b80Q1vZ5ZzvLkX/QXVjADtIMvJ3Px0
46Yv
iRCe/PujopZE+xWksVnVzDGPLHLyZdrVzRPd+7LLjezlrQdR698YYqqviAxm
/1+k
5Dq6eKiv/bLo4ztxXqfoMrS0bUxbYRyhQVNspADFb6LnWfxPlIqkiQ==
=Er+B
-----END PGP SIGNATURE-----