ET SHELLCODE Possible %u0d0d%u0d0d UTF-16 Heap Spray Attempt

7.0.35.0SID: 2012968Rev: 4Enabled1 views
Sourceet/open
Fileemerging-shellcode.rules
CreatedJune 9, 2011
UpdatedApril 9, 2024
Classificationshellcode-detect
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET SHELLCODE Possible %u0d0d%u0d0d UTF-16 Heap Spray Attempt"; flow:established,to_client; file.data; content:"%u0d0d%u0d0d"; nocase; reference:url,www.darkreading.com/security/vulnerabilities/221901428/index.html; classtype:shellcode-detect; sid:2012968; rev:4; metadata:created_at 2011_06_09, confidence Medium, signature_severity Major, updated_at 2024_04_09;)

Metadata

created at2011_06_09
confidenceMedium
signature severityMajor
updated at2024_04_09

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!