ET DELETED CVE-2013-1331 Microsoft Office PNG Exploit plugin-detect script access

SID: 2017006Rev: 60 viewsHistory

Sourceet/open

CreatedJune 12, 2013

UpdatedJune 15, 2022

Classificationattempted-user

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED CVE-2013-1331 Microsoft Office PNG Exploit plugin-detect script access"; flow:established,to_client; file_data; content:"ScriptBridge.ScriptBridge"; content:"|00|h|00|t|00|t|00|p|00 3a 00 2f 00 2f 00|"; content:"|2f 00|v|00|w|00|.|00|p|00|h|00|p|00|?|00|i|00|="; distance:0; fast_pattern; reference:url,blogs.technet.com/b/srd/archive/2013/06/11/ms13-051-get-out-of-my-office.aspx; classtype:attempted-user; sid:2017006; rev:6; metadata:created_at 2013_06_12, signature_severity Unknown, tag CISA_KEV, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_06_15;)

References

url	blogs.technet.com/b/srd/archive/2013/06/11/ms13-051-get-out-of-my-office.aspx

Metadata

created at2013_06_12

signature severityUnknown

tagDescription_Generated_By_Proofpoint_Nexus

updated at2022_06_15

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!