ET ACTIVEX Symantec Security Check RuFSI ActiveX Control Buffer Overflow

7.0.3 5.0SID: 2009847Rev: 9Disabled0 views

Fileemerging-activex.rules

CreatedJuly 30, 2010

UpdatedApril 10, 2024

Classificationweb-application-attack

alert http $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET ACTIVEX Symantec Security Check RuFSI ActiveX Control Buffer Overflow"; flow:established,to_client; file.data; content:"69DEAF94-AF66-11D3-BEC0-00105AA9B6AE"; fast_pattern; nocase; pcre:"/classid\s*=\s*[\x22\x27]?\s*clsid\s*\x3a\s*\x7B?\s*69DEAF94-AF66-11D3-BEC0-00105AA9B6AE/si"; reference:bugtraq,8008; reference:url,xforce.iss.net/xforce/xfdb/12423; reference:url,juniper.net/security/auto/vulnerabilities/vuln8008.html; classtype:web-application-attack; sid:2009847; rev:9; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2010_07_30, deployment Perimeter, confidence High, signature_severity Major, tag ActiveX, updated_at 2024_04_10;)

References

bugtraq	8008
url	xforce.iss.net/xforce/xfdb/12423
url	juniper.net/security/auto/vulnerabilities/vuln8008.html

Metadata

affected productWindows_XP_Vista_7_8_10_Server_32_64_Bit

attack targetClient_Endpoint

created at2010_07_30

deploymentPerimeter

confidenceHigh

signature severityMajor

tagActiveX

updated at2024_04_10

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!