ET WEB_CLIENT Microsoft Rich Text File .RTF File download with invalid listoverridecount

SID: 2018315Rev: 60 views

Sourceet/open

CreatedDecember 12, 2012

UpdatedOctober 8, 2019

Classificationattempted-user

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Microsoft Rich Text File .RTF File download with invalid listoverridecount"; flow:from_server,established; file_data; content:"|5c|listoverridetable"; distance:0; content:"|5c|listoverride|5c|"; fast_pattern; content:"|5c|listoverridecount"; isdataat:2,relative; pcre:"/^(?:0*?[19]\d|[^190])/R"; reference:cve,2012-2539; classtype:attempted-user; sid:2018315; rev:6; metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_Endpoint, created_at 2012_12_12, cve CVE_2012_2539, deployment Perimeter, signature_severity Major, tag Web_Client_Attacks, updated_at 2019_10_08;)

References

cve

2012-2539

Metadata

affected productWeb_Browser_Plugins

attack targetClient_Endpoint

created at2012_12_12

cveCVE-2012-2539

deploymentPerimeter

signature severityMajor

tagWeb_Client_Attacks

updated at2019_10_08

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!