EmergingThreats
>
Main Web
>
2013162
(2011-10-12,
TWikiGuest
)
E
dit
A
ttach
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET ACTIVEX Ubisoft
CoGSManager
?
ActiveX
?
RunCore
?
method Buffer Overflow Vulnerability"; flow:to_client,established; file_data; content:"
]*classid\s*=\s*[\x22\x27]?\s*clsid\s*\x3a\s*\x7B?\s*27527D31-447B-11D5-A46E-0001023B4289/si"; reference:url,secunia.com/advisories/45044; classtype:attempted-user; sid:2013162; rev:2;)
Added 2011-10-12 19:36:14 UTC
Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET ACTIVEX Ubisoft
CoGSManager
?
ActiveX
?
RunCore
?
method Buffer Overflow Vulnerability"; flow:to_client,established; file_data; content:"
]*classid\s*=\s*[\x22\x27]?\s*clsid\s*\x3a\s*\x7B?\s*27527D31-447B-11D5-A46E-0001023B4289/si"; classtype:attempted-user; reference:url,secunia.com/advisories/45044; sid:2013162; rev:2;)
Added 2011-07-02 23:01:36 UTC
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET ACTIVEX Ubisoft
CoGSManager
?
ActiveX
?
RunCore
?
method Buffer Overflow Vulnerability"; flow:to_client,established; file_data; content:"
]*classid\s*=\s*[\x22\x27]?\s*clsid\s*\x3a\s*\x7B?\s*27527D31-447B-11D5-A46E-0001023B4289/si"; classtype:attempted-user; reference:url,secunia.com/advisories/45044; sid:2013162; rev:2;)
Added 2011-07-02 01:12:37 UTC
E
dit
|
A
ttach
|
P
rint version
|
H
istory
: r1
|
B
acklinks
|
R
aw View
|
WYSIWYG
|
M
ore topic actions
Topic revision: r1 - 2011-10-12
-
TWikiGuest
Main
Log In
or
Register
Main Web
Create New Topic
Index
Search
Changes
Preferences
User Reference
ATasteOfTWiki
TextFormattingRules
Signature Reference
WebRss
Feed
EmergingFAQ
Copyright © Emerging Threats
Edit | Attach | Print version | History: r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Main Web
Create New Topic
Index
Search
Changes
Preferences
Copyright © Emerging Threats