SID 1:47100

Rule Category

BROWSER-IE -- Snort has detected traffic known to exploit vulnerabilities present in the Internet Explorer browser, or products that have the Trident or Tasman engines.

Alert Message

BROWSER-IE Microsoft Edge TryArraySplice memory corruption attempt

Rule Explanation

This event is generated when an attempt to exploit a Microsoft Edge Scripting Engine vulnerability is detected. Impact: An attacker who successfully exploits this vulnerability could execute arbitrary code in the context of the current user on the affected system. Details: This rule specifically detects JavaScript that is typically used to exploit this vulnerability. Ease of Attack: Medium

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group