As part of Unit 42’s ongoing threat research, we can now disclose that Palo Alto Networks Unit 42 researchers have discovered vulnerabilities that have been addressed by Microsoft in their September and October security update releases.
CVE | Vulnerability Name | Affected Products | Researcher |
CVE-2017-8567 | Microsoft Office Remote Code Execution | Microsoft Excel for Mac 2011 | Jin Chen |
CVE-2017-8749 | Internet Explorer Memory Corruption Vulnerability | Internet Explorer 10, Internet Explorer 11 | Hui Gao |
CVE-2017-11793 | Scripting Engine Memory Corruption Vulnerability | Internet Explorer 9, Internet Explorer 10, Internet Explorer 11 | Hui Gao |
CVE-2017-11822 | Internet Explorer Memory Corruption Vulnerability | Internet Explorer 9, Internet Explorer 11 | Hui Gao |
For current customers with a Threat Prevention subscription, Palo Alto Networks has also released IPS signatures providing proactive protection from these vulnerabilities. Traps, Palo Alto Networks advanced endpoint protection, can block memory corruption based exploits of this nature.
Palo Alto Networks is a regular contributor to vulnerability research in Microsoft, Adobe, Apple, Google Android and other ecosystems. By proactively identifying these vulnerabilities, developing protections for our customers, and sharing the information with the security community, we are removing weapons used by attackers to threaten users, and compromise enterprise, government, and service provider networks.