ET ACTIVEX Tom Sawyer Possible Memory Corruption Attempt Format String Function Call
Sourceet/open
CreatedSeptember 12, 2011
UpdatedJuly 26, 2019
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET ACTIVEX Tom Sawyer Possible Memory Corruption Attempt Format String Function Call"; flow:to_client,established; content:"ActiveXObject"; nocase; content:"TomSawyer.DefaultExtFactory.5.5.3.238.VS7.1"; nocase; distance:0; classtype:attempted-user; sid:2013566; rev:2; metadata:created_at 2011_09_12, confidence Low, signature_severity Unknown, updated_at 2019_07_26;)
Metadata
created at2011_09_12
confidenceLow
signature severityUnknown
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!