ET ACTIVEX Apple QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow
Sourceet/open
Fileemerging-activex.rules
CreatedJuly 30, 2010
UpdatedApril 10, 2024
Classificationweb-application-attack
alert http $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET ACTIVEX Apple QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow"; flow:established,to_client ; file.data; content:"02BF25D5-8C17-4B23-BC80-D3488ABDDC6B"; fast_pattern; nocase; content:"String("; nocase; distance:0; pcre:"/^\s*?[0-9]{4}/R"; pcre:"/(SetBgColor|SetMovieName|SetTarget|SetMatrix|SetHREF)/Ri"; reference:bugtraq,27769 ; reference:cve,CVE-2008-0778 ; reference:url,www.milw0rm.com/exploits/5110 ; classtype:web-application-attack; sid:2007878; rev:13; metadata:created_at 2010_07_30, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_10;)
References
| bugtraq | 27769 |
| cve | CVE-2008-0778 |
| url | www.milw0rm.com/exploits/5110 |
Metadata
created at2010_07_30
confidenceHigh
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_04_10
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!