Rule Release for Today, Tuesday July 13th, 2010
Summary: Cisco Talos released rules on Tuesday, July 13th, 2010, covering four Microsoft advisories: MS10-042, where invalid hex-encoded characters passed as a parameter to an hcp:// URI search query may let a remote attacker bypass security restrictions in Help and Support Center; MS10-043, a programming error in the Canonical Display Driver (cdd.dll) that may allow remote code execution; MS10-044, multiple vulnerabilities in Microsoft Access that may allow remote code execution; and MS10-045, a programming error in Microsoft Outlook that may allow remote code execution. The release also introduces three new rule groups - botnet-cnc.rules, blocklist.rules and phishing-spam.rules - which decentralize existing coverage from spyware-put.rules and specific-threats.rules, with the rules gleaned from honeypot and malware data collected by the Sourcefire VRT.
Key Takeaway: Three of the four advisories describe flaws that may let a remote attacker execute code, and one of them sits in Outlook - the client your users open all day.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026