RULE(RULE ID:1905720)

Rule General Information
Release Date: 2018-07-18
Rule Name: NETBIOS PolarisOffice Insecure Library Loading - SMB Unicode Vulnerability (CVE-2018-12589)
Severity:
CVE ID:
Rule Protection Details
Description: Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: ExploitDB:44985
http://packetstormsecurity.com/files/148312/Polaris-Office-2017-8.1-Remote-Code-Execution.html
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.polarisoffice.com/