Rule Category

BROWSER-IE -- Snort has detected traffic known to exploit vulnerabilities present in the Internet Explorer browser, or products that have the Trident or Tasman engines.

Alert Message

BROWSER-IE Microsoft Internet Explorer memory corruption attempt

Rule Explanation

This event is generated when an attempt to exploit CVE-2018-8249 over file transport methods (such as HTTP, FTP) is detected. Impact: Successful exploitation of this vulnerability could result in remote code execution under the user's current permissions. Details: CVE-2018-8249 is a memory corruption vulnerability in Microsoft Internet Explorer 11. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely. Ease of Attack: Medium

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group

Rule Groups

No rule groups

CVE

Additional Links

Rule Vulnerability

CVE Additional Information

This product uses data from the NVD API but is not endorsed or certified by the NVD.
CVE-2018-8249
Loading description