Versions (4)
Version DetailsCurrent
Rev: 4 • Jan 4, 2018, 12:00 PMET WEB_CLIENT Spectre Kernel Memory Leakage JavaScript
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Spectre Kernel Memory Leakage JavaScript"; flow:established,from_server; file_data; content:"<script"; nocase; content:"<"; distance:0; content:".length"; distance:0; nocase; fast_pattern; pcre:"/^\s*?\)\s*?\{\s*(?P<var>[^\s]+)\s*=[^\x5b]+?\x5b\s*(?P=var)\s*?\|\s*?0\s*?\]\s*?\x3b\s*?/Rsi"; content:"^="; distance:0; pcre:"/^\s*[^\s]+\x5b\s*?[^\x5d\x7c]+\x7c\s*?0\s*?\x5d\s*?\x7c\s*?0\s*?\x3b/Rsi"; reference:cve,2017-5753; reference:cve,2017-5715; reference:url,github.com/cgvwzq/spectre; classtype:attempted-user; sid:2025185; rev:4; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2018_01_04, cve CVE_2017_5753, deployment Perimeter, performance_impact Low, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_09_16, reviewed_at 2024_09_16;)
Jan 4, 2018, 12:00 PM
Sep 16, 2024, 12:00 PM
Jan 4, 2018, 12:00 PM
Sep 30, 2025, 9:36 PM
rules/emerging-web_client.rules