Signature Detail
Short Name |
HTTP:PHP:EXPLOIT-KIT-ACTIV |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Suspicious Exploit Kit Activity Detected |
Release Date |
2016/05/03 |
Update Number |
2711 |
Supported Platforms |
srx-12.1+, vsrx-15.1+ |
HTTP: Suspicious Exploit Kit Activity Detected
This signature detects suspicious Exploit Kit activity. Exploit kits are very specific type of toolkits which are being used by cybercriminals to deliver pieces of malware.
Extended Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
Affected Products
- microsoft internet_explorer 10
- microsoft internet_explorer 6
- microsoft internet_explorer 7
- microsoft internet_explorer 8
- microsoft internet_explorer 9
References
- CVE: CVE-2013-2551