CB Response: Is there a way to track and alert on CVE-2019-1367?

[#1]

Environment

• CB Response Server: All Versions
• Internet Explorer: Prior to September 23, 2019 update

Question

Is it possible to track systems affectecd by CVE-2019-1367?

Answer

• Tracking the CVE within Response has caused performance impacts due to the large amounts of event data captured when attempting to capture this behavior.
• It is suggested to follow Microsoft's advice to patch Internet Explorer to at least the September 23, 2019 cumulative updates to address this CVE.

Related Content

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1367