ET ACTIVEX Tom Sawyer Possible Memory Corruption Attempt Format String Function Call

7.0.35.0SID: 2013566Rev: 4Enabled0 views
Sourceet/open
Fileemerging-activex.rules
CreatedSeptember 12, 2011
UpdatedApril 9, 2024
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET ACTIVEX Tom Sawyer Possible Memory Corruption Attempt Format String Function Call"; flow:established,to_client; file.data; content:"ActiveXObject"; nocase; content:"TomSawyer.DefaultExtFactory.5.5.3.238.VS7.1"; fast_pattern; nocase; distance:0; classtype:attempted-user; sid:2013566; rev:4; metadata:created_at 2011_09_12, confidence Low, signature_severity Unknown, updated_at 2024_04_09;)

Metadata

created at2011_09_12
confidenceLow
signature severityUnknown
updated at2024_04_09

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!