BROWSER-IE scripting engine memory corruption vulnerability attempt

IPS-CFW

1 SID: 44508

Description

Detects web content that exploits CVE-2017-11793, memory corruption in Microsoft's scripting engine that can allow code execution. The rule matches the range error and JSON serialization pattern that public exploits use to corrupt memory in the engine.

CVEs

Related blogs

Shai-Hulud 2.0: Aggressive, Automated, and Fast Spreading

November 26, 202526 min read

Cloud and Threat Report: Was 2020 the Year of the Malicious Office Document?

Cloud and Threat Report: Was 2020 the Year of the Malicious Office Document?

March 16, 20213 min read

The Root of Your AWS Insecurities

The Root of Your AWS Insecurities

February 16, 20219 min read

CORS Exploitation in the Cloud

CORS Exploitation in the Cloud

January 9, 20209 min read

Adwind RAT employs new obfuscation techniques

Adwind RAT employs new obfuscation techniques

August 3, 20174 min read

Zepto variant of Locky ransomware delivered via popular Cloud Storage apps

Zepto variant of Locky ransomware delivered via popular Cloud Storage apps

July 19, 20165 min read

The Untapped Power of HTTP Security Headers

The Untapped Power of HTTP Security Headers

July 10, 20155 min read