FILE-OTHER -- Snort detected traffic targeting vulnerabilities in a file type that does not require enough rule coverage to have its own category.
FILE-OTHER Microsoft Windows Defender malformed RAR memory corruption attempt
This event is generated when a memory corruption attempt against Microsoft Windows Defender is observed Impact: Potential code execution Details: This rule targets a malformed RAR archive that triggers an exploit in Microsoft Windows Defender. Ease of Attack:
No information provided
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
CVE-2018-0986 |
Loading description
|