Check Point Advisories

Adobe Flash Player SWF Tag Size Mismatch Vulnerabilities (CVE-2011-2453; CVE-2016-4175; CVE-2016-4179)

Vulnerability
Protection

Check Point Reference:	CPAI-2012-098
Date Published:	19 Mar 2012
Severity:	High
Last Updated:	Wednesday 20 July, 2016
Source:
Industry Reference:	CVE-2011-2453 CVE-2016-4175 CVE-2016-4179
Protection Provided by:	Security Gateway R81, R80, R77, R75, R71, R70
Who is Vulnerable?
Vulnerability Description	Multiple vulnerabilities have been discovered in Adobe Shockwave files (SWF). The vulnerabilities are due to an error while parsing SWF files containing abnormally sized control and definition tags. Remote attackers could exploit these vulnerabilities by enticing target users to open SWF files containing such malformed tags. Successful exploitation could lead to system compromise.

Protection Overview

This protection detects and blocks SWF files containing malformed tags.

In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.

Security Gateway R80 / R77 / R75 / R71 / R70

In the IPS tab, click Protections and find the Adobe Flash Player SWF Tag Size Mismatch Vulnerabilities protection using the Search tool and Edit the protection's settings.
Install policy on all Security Gateways.

This protection's log will contain the following information:

Attack Name: Adobe Products Violation.
Attack Information: Adobe Flash Player SWF tag size mismatch vulnerabilities