Versions (2)
Version DetailsCurrent
Rev: 3 • Apr 30, 2014, 12:00 PMET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption 2
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption 2"; flow:established,to_server; http.uri; content:"/StageOne/iexplore_exe/"; content:"/vgx_dll/"; fast_pattern; http.host; content:"watson.microsoft.com"; startswith; reference:url,community.websense.com/blogs/securitylabs/archive/2014/04/28/cve-2014-1776-using-crash-reports-to-find-possible-exploited-vulnerabilities.aspx; reference:url,www.websense.com/assets/reports/websense-crash-report-en.pdf; reference:cve,2014-1776; classtype:attempted-user; sid:2018436; rev:3; metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_Endpoint, created_at 2014_04_30, cve CVE_2014_1776, deployment Perimeter, confidence Medium, signature_severity Major, tag Web_Client_Attacks, updated_at 2020_04_29;)
Apr 30, 2014, 12:00 PM
Apr 29, 2020, 12:00 PM
Apr 30, 2014, 12:00 PM
May 31, 2024, 9:00 PM
rules/emerging-web_client.rules