MICROSOFT SAFETY SCANNER 1.0.3 CODE
Alert tcp $EXTERNAL_NET any -> $SMTP_SERVERS 25 (msg:"BROWSER-IE Microsoft Internet Explorer CStr internal string use-after-free attempt" flow:to_server,established file_data content:"" nocase content:"=" within:10 content:"" within:40 nocase content:" $HOME_NET any (msg:"ET WEB_CLIENT Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Attempt" flow:established,to_client content:"appletComponentArch.DynamicTreeApplet" nocase content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 content:"PARAM" nocase distance:0 reference:url,reference:url,reference:bugtraq,41842 reference:cve,2010-1214 classtype:attempted-user sid:2011538 rev:2 metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_Endpoint, deployment Perimeter, tag Web_Client_Attacks, signature_severity Major, created_at 2010_09_27, updated_at 2016_07_01
0 kommentar(er)
