[Emerging-Sigs] Signature for Microsoft Internet Explorer MSHTML Findtext Processing Issue

dave richards dave.richards0319 at gmail.com
Thu Oct 28 00:56:25 EDT 2010


Hi Matt,

Please find the signature for Microsoft Internet Explorer MSHTML Findtext
Processing Issue

alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET WEB-ATTACKS
Microsoft Internet Explorer MSHTML FindText Processing Issue";
flow:to_client,established; content:"type="; nocase; distance:0;
content:"textRange."; nocase; distance:0; content:"findText("; nocase;
distance:0; classtype:attempted-user; reference:cve,CVE-2010-2553;
reference:url,exploit-db.com/exploits/15122; reference:url,
exploit-db.com/moaub-27-microsoft-internet-explorer-mshtml-findtext-processing-issue;
sid:20101020; rev:1;)


Looking forward for your comments if any
-- 
Regards,
Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20101028/17e2893d/attachment.html


More information about the Emerging-sigs mailing list