Netskope Threat Labs

FILE-OTHER Multiple products XML Import Command buffer overflow attempt

IPS-CFW

5 SIDs: 45558, 45559, 200065, 200066, 200067

Detects requests exploiting CVE-2017-7310, a buffer overflow in XML import handling that can allow code execution. The rule matches the oversized classification structures that public exploits use to corrupt server memory.