ET WEB_CLIENT Microsoft Rich Text File .RTF File download with invalid listoverridecount

7.0.35.0SID: 2018315Rev: 7Enabled3 views
Sourceet/open
Fileemerging-web_client.rules
CreatedDecember 12, 2012
UpdatedMarch 13, 2024
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Microsoft Rich Text File .RTF File download with invalid listoverridecount"; flow:established,to_client; file.data; content:"|5c|listoverridetable"; distance:0; content:"|5c|listoverride|5c|"; fast_pattern; content:"|5c|listoverridecount"; isdataat:2,relative; pcre:"/^(?:0*?[19]\d|[^190])/R"; reference:cve,2012-2539; classtype:attempted-user; sid:2018315; rev:7; metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_Endpoint, created_at 2012_12_12, cve CVE_2012_2539, deployment Perimeter, signature_severity Major, tag Web_Client_Attacks, updated_at 2024_03_13;)

References

cve2012-2539

Metadata

affected productWeb_Browser_Plugins
attack targetClient_Endpoint
created at2012_12_12
deploymentPerimeter
signature severityMajor
tagWeb_Client_Attacks
updated at2024_03_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!