cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1021
Views
0
Helpful
2
Replies

MS05-009 PNG Exploit

brok3n
Level 1
Level 1

The PoC code is out in the public -- when can we expect a Cisco sig? Theres apparently a trojan kit being propagated as well.

-wP!

2 Replies 2

gfullage
Cisco Employee
Cisco Employee

The best place to get updated on this from now on is the IPS Alert Center located here:

http://www.cisco.com/cgi-bin/front.x/ipsalerts/ipsalertsHome.pl

This will be updated very regularly as new vulnerabilities/exploits are found, and will let you know what we plan on doing. If you click on the More... link in the Latest Threats window, you'll see a signature is currently being written for this particular vulnerability/exploit. Since it's a High severity it'll be released as soon as the signature is ready.

Woah, hang on, just as I write this the web page has been updated to say that it'll be released with S143, which will come out tonight sometime I would assume.

rupadras
Cisco Employee
Cisco Employee

A signature covering the MSN Messenger PNG vulnerability will be released in S143.

Review Cisco Networking for a $25 gift card