Endpoint

Sophos Exploit Prevention

Release notes

About these release notes

These are the release notes for Sophos Exploit Prevention managed by Sophos Enterprise Console. Exploit Prevention is available alongside Sophos Endpoint Security and Control for Windows if you have the appropriate license. It provides protection against ransomware, protects critical functions in web browsers,and protects the applications most vulnerable to exploitation by malware among other forms of exploitation attacks.

Version 3.7

Components

Sophos Exploit Prevention

3.7.12.508

April 2019

3.7.10.768

February 2019

3.7.6.755

August 2018

3.7.6

May 2018

HitManPro.Alert

3.7.12.508

3.7.10.768

3.7.6.755

3.7.6.755

SophosClean

3.7.21

3.7.21

3.7.21

3.7.21

Version 3.7.12.508

HitmanPro.Alert has been updated to 3.7.12.508.

Resolved issues

Issue ID

Component

Description

WINEP-7929

HitmanPro.Alert

Resolved an issue with starting Skype automatically.

WINEP-13549

HitmanPro.Alert

Resolved an issue with ROP alerts in Microsoft Office 2016.

WINEP-14044

HitmanPro.Alert

Resolved an issue with ROP alerts in Microsoft Excel.

WINEP-14080

HitmanPro.Alert

Resolved an issue with Cygwin commands failing.

WINEP-14369

HitmanPro.Alert

Resolved an issue with detections in Cygwin.

WINEP-14482

HitmanPro.Alert

Resolved an issue when opening PDF files.

WINEP-14507

HitmanPro.Alert

Resolved an issue with some websites being slow to open.

WINEP-14696

HitmanPro.Alert

Resolved an issue with caller check detections.

WINEP-14789

HitmanPro.Alert

Resolved an issue with caller check detections in 1password.

WINEP-15400

HitmanPro.Alert

Resolved issues with Windows 10 failing to start.

WINEP-15531

HitmanPro.Alert

Resolved an issue with starting SiteKiosk.

WINEP-15539

HitmanPro.Alert

Resolved an issue with CryptoGuard detections in Explorer.

WINEP-15651

HitmanPro.Alert

Resolved issues with disk access when running HitmanPro.Alert .

WINEP-15779

HitmanPro.Alert

Resolved an issue with CryptoGuard detections in Windows Media Player.

WINEP-15828

HitmanPro.Alert

Resolved an issue with remote detections when creating PDF files.

WINEP-16310

HitmanPro.Alert

Resolved an issue with false Wipeguard detections when using Symantec PGP Encryption.

WINEP-16404

HitmanPro.Alert

Resolved an IAT alert in Internet Explorer 11.

WINEP-16512

HitmanPro.Alert

Resolved an issue with Internet Explorer failing when Intercept X and SofTrack are installed.

WINEP-18667

HitmanPro.Alert

Resolved an issue with servers stopping when HitmanPro.Alert is upgraded.

WINEP-18783

HitmanPro.Alert

Resolved a conflict with the Intel MPX Runtime driver that caused performance issues.

Version 3.7.10.768

HitmanPro.Alert has been updated to 3.7.10.768.

Resolved issues

Issue ID

Component

Description

WINEP-16464

HitmanPro.Alert

Resolved an issue with ROP alerts in Microsoft Office 2013.

WINEP-16202

HitmanPro.Alert

Resolved an issue with ROP alerts when streaming internet media.

WINEP-15695

HitmanPro.Alert

Resolved an issue with IP detection in a publishing application.

WINEP-14950

HitmanPro.Alert

Resolved an issue with ROP detection in Microsoft Word.

WINEP-14858

HitmanPro.Alert

Resolved an issue with ROP detections in several applications.

WINEP-14833

HitmanPro.Alert

Resolved an issue with increased ROP detections in Chrome 67 and later.

WINEP-14590

HitmanPro.Alert

Resolved an issue with intruder detection in Chrome and Internet Explorer with LanDesk installed.

WINEP-14505

HitmanPro.Alert

Resolved an issue with lockdown detections in PDF files.

WINEP-14442

HitmanPro.Alert

Resolved an issue with caller check detections in Microsoft Outlook plugins.

WINEP-14253

HitmanPro.Alert

Resolved an issue with HitmanPro.Alert causing Windows to stop.

WINEP-14139

HitmanPro.Alert

Resolved an issue with Skype stopping during calls.

WINEP-13578

HitmanPro.Alert

Resolved an issue with CryptoGuard detections in Lotus Notes.

WINEP-13460

HitmanPro.Alert

Resolved an issue with Windows 7 machines not shutting down properly.

WINEP-13454

HitmanPro.Alert

Resolved an issue with LoadLib in Firefox.

WINEP-13338

HitmanPro.Alert

Resolved an issue with Wipeguard protection not working on Hyper-V virtual systems.

WINEP-13238

HitmanPro.Alert

Resolved an issue with caller check detections in Microsoft Excel.

WINEP-13230

HitmanPro.Alert

Resolved an issue with Windows 7 stopping when running Intercept X and Symantec Endpoint 14.0.3897.1101.

WINEP-13209

HitmanPro.Alert

Resolved an issue with ROP detections in Microsoft Excel.

WINEP-13164

HitmanPro.Alert

Resolved an issue with CryptoGuard detections in AppLife Update.

WINEP-13162

HitmanPro.Alert

Resolved an issue with a false detection in Digital Guardian.

WINEP-12989

HitmanPro.Alert

Resolved an issue with Windows stopping due to HitmanPro.Alert and DeviceLock drivers clashing.

WINEP-12932

HitmanPro.Alert

Resolved a lockdown detection in Internet Explorer.

WINEP-12840

HitmanPro.Alert

Resolved Data Execution Prevention issues in Internet Explorer.

WINEP-12735

HitmanPro.Alert

Resolved an IAF alert for Microsoft Outlook.

WINEP-11473

HitmanPro.Alert

Resolved an issue with Windows error dumps for HitmanPro.Alert being created daily.

Version 3.7.6.755

Security improvements.

Updated components

HitManPro.Alert has been updated to 3.7.6.755.

Version 3.7.6

Updated components

HitManPro.Alert has been updated to 3.7.6.

Resolved issues

Issue ID

Component

Description

WINEP-13294

HitmanPro.Alert

Resolved endpoint performance issues.

WINEP-13238

HitmanPro.Alert

Resolved an issue with Microsoft Excel when running the "UnionSquare" plugin.

WINEP-12842

HitmanPro.Alert

Resolved an issue with Microsoft Powerpoint 2016.

WINEP-12826

HitmanPro.Alert

Resolved issues with driver verification.

WINEP-12686

HitmanPro.Alert

Resolved an issue with java applications not launching in Internet Explorer.

WINEP-12670

HitmanPro.Alert

Resolved an issue with program starts being delayed.

WINEP-12635

HitmanPro.Alert

Resolved issues with machines stopping and failing to complete shutdown.

WINEP-12588

HitmanPro.Alert

Resolved issues with opening web applications in Internet Explorer.

WINEP-12407

HitmanPro.Alert

Resolved an issue with Internet Explorer stopping repeatedly.

WINEP-12367

HitmanPro.Alert

Resolved issues with running VBScripts in Microsoft Excel.

WINEP-12301

HitmanPro.Alert

Resolved an issue with detections in Microsoft Outlook.

WINEP-12299

HitmanPro.Alert

Resolved an issue with VitreaCore "vims" radiology application not opening.

WINEP-12278

HitmanPro.Alert

Resolved an issue with servers stopping when running CryptoGuard.

WINEP-12275

HitmanPro.Alert

Resolved an issue with MitreFinch TMS not opening.

WINEP-12160

HitmanPro.Alert

Resolved an issue with CCTV software ABUS VMSEnterprise failing to start.

WINEP-11977

HitmanPro.Alert

Resolved an issue with detections in the XCargo Microsoft Excel plugin.

WINEP-11959

HitmanPro.Alert

Resolved issues with Freedom Scientific software.

WINEP-11880

HitmanPro.Alert

Resolved an issue with mitigations after they have been turned off in a policy.

WINEP-11514

HitmanPro.Alert

Resolved an issue with opening Acrobat Reader.

WINEP-11319

HitmanPro.Alert

Resolved an issue with Intercept X and Symantec AV causing Internet Explorer 11 to stop.

WINEP-11296

HitmanPro.Alert

Resolved an issue with intruder detections in Internet Explorer and Firefox.

WINEP-10920

HitmanPro.Alert

Resolved an issue with CryptoGuard affecting the load time of Zorgdossier.

WINEP-10876

HitmanPro.Alert

Resolved an issue with servers stopping serving files when CryptoGuard is installed.

WINEP-10741

HitmanPro.Alert

Resolved an issue with lockdown detection on Bomgar support client.

WINEP-10363

HitmanPro.Alert

Resolved an issue with VBScript GodMode in Internet Explorer.

WINEP-10059

HitmanPro.Alert

Resolved an issue with detections in games.

WINEP-8871

HitmanPro.Alert

Resolved issues with Internet Explorer creating unusable pages.

WINEP-10060

HitmanPro.Alert

Resolved an issue when opening PDF files.

WINEP-8325

HitmanPro.Alert

Resolved an issue with McAfee and Intercept X.

Known issues and limitations

Issue ID

Component

Description

WINEP-7737

Exploit Prevention

Exploit Prevention reports errors on upgrade if the endpoint has a pending reboot. You will need to reboot the machine twice to resolve the issue.

WINEP-7523

HitManPro.Alert

The HitManPro.Alert plug-in fails to initialize if Exploit Prevention disabled is on startup.

Technical support

You can find technical support for Sophos products in any of these ways:

Legal notices

Copyright © 2019 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.

Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.