View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000597 | file | General | public | 2024-12-20 08:03 | 2024-12-26 18:59 |
| Reporter | Ange | Assigned To | christos | ||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | resolved | Resolution | fixed | ||
| Product Version | 5.46 | ||||
| Fixed in Version | HEAD | ||||
| Summary | 0000597: Add support for Adobe IPM DB (SQLite-based) | ||||
| Description | Adobe In Product Messaging stores its updates on SQLite DB files with the products. They are the most common form of SQLite DB found in the wild sharing the exact same schema. | ||||
| Steps To Reproduce | - Scan the attachment (a cleaned-up DB coming from a genuine Adobe IPM db). | ||||
| Additional Information | The following detection to be added to the sql signature file was found working reliably on a sample of 19K files. >0xA0 search/0x100 CREATE\ TABLE\ IPMMessage\ ( Adobe IPM DB >0xC00 search/0x100 CREATE\ TABLE\ IPMMessage\ ( Adobe IPM DB | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-12-20 08:03 | Ange | New Issue | |
| 2024-12-20 08:03 | Ange | File Added: test-adobe_ipm.db | |
| 2024-12-26 18:59 | christos | Assigned To | => christos |
| 2024-12-26 18:59 | christos | Status | new => assigned |
| 2024-12-26 18:59 | christos | Status | assigned => resolved |
| 2024-12-26 18:59 | christos | Resolution | open => fixed |
| 2024-12-26 18:59 | christos | Fixed in Version | => HEAD |
| 2024-12-26 18:59 | christos | Note Added: 0004142 |
