cancel
Showing results for 
Search instead for 
Did you mean: 
jezkerwin
Level 7

HIPS 7 P5 Blocking PDF documents being displayed from within IE7

I'm current running HIPS7 P5 and we've had reported accounts of the dreaded red X when pdf documents are embedded into the web page.

disabling of IPS allow the PDF document to be displayed.

any ideas as to what policy in ePO would be causing this.

0 Kudos
5 Replies
McAfee Employee

Re: HIPS 7 P5 Blocking PDF documents being displayed from within IE7

Is the behavior reproducible with HIPS 7 Patch 6 as well ?

0 Kudos
jezkerwin
Level 7

Re: HIPS 7 P5 Blocking PDF documents being displayed from within IE7

Yes, Patch 6 also produces the same behaviour.

0 Kudos
jezkerwin
Level 7

Re: HIPS 7 P5 Blocking PDF documents being displayed from within IE7

After doing some digging in the log file, I've found that Internet Explorer was Triggering Signature ID 3793

0 Kudos
bgable
Level 11

Re: HIPS 7 P5 Blocking PDF documents being displayed from within IE7

Sig 3793 is the "Adobe Reader and Acrobat ActiveX Control remote Code Execution Vulnerabilities"

If you go to the Description tab for the signature, you'll see the CVE links:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0045

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6027

There will be information for the Adobe security updates that cover this vulnerability.

Install those and you can disable the signature.

The other option would be to create an exception based off your event.

0 Kudos
carolina
Level 7

Re: HIPS 7 P5 Blocking PDF documents being displayed from within IE7

I've seen those same problems with the about screen though I'm not sure  if that indicates a corrupt VSE install or not.  Have you tried  uninstall/reboot/reinstall yet on any of these three systems to see if  that resolves the issue?  It may be worth a shot if it's a corrupted  installation.

0 Kudos