cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1205
Views
5
Helpful
7
Replies

ips signature 7067 issue?

wgorman
Level 1
Level 1

Is anyone else experiencing issues with this IPS signature 7067/0, Microsoft Internet Explorer Memory Corruption alert ?

The signature version update is 899.0 and it was released yesterday afternoon (12\8\15).

We have received over 5000 hits from external addresses.

Is this a false\positive event?

-willG

1 Accepted Solution

Accepted Solutions

We have determined it is a false positive,  the signature will be retired in the next release.

View solution in original post

7 Replies 7

mcvosi
Level 1
Level 1

Seeing the same.

androdri
Level 1
Level 1

Hello willG;

This is a most likely a false positive,  We will take another look at the signature and see if it possible to increase the fidelity of the signature,  if not we will take the steps to retire it.

Thank you for you feedback

Andy Rodriguez

Cisco Legacy IPS Signature Development

Any update on this as I am seeing the same thing?

We have determined it is a false positive,  the signature will be retired in the next release.

siddiquiasad
Level 1
Level 1

experiencing the same !!!

BR,

Asad Siddiqui

isadmin
Level 1
Level 1

When is the next release scheduled?

The signature was retired in S900.  The release was posted on 12/10/2015.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: