BROWSER-FIREFOX -- Snort has detected traffic known to exploit vulnerabilities present in the Firefox browser, or products that have the "Gecko" engine (Thunderbird email client, etc.).
BROWSER-FIREFOX Mozilla Firefox ReadableStreamCloseInternal out-of-bounds access attempt
This rule looks for a certain sequence of JavaScript operations that are designed to cause a state inconsistency bug to manifest, leading to an out-of-bounds read. This bug could be exploited to corrupt memory, potentially leading to arbitrary remote code execution.
This rule alerts when a specifically formatted web page designed to exploit CVE-2020-6806 is detected. CVE-2020-6806 is a memory corruption bug in Mozilla Firefox.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
CVE-2020-6806 |
Loading description
|
Tactic: Initial Access
Technique: Drive-by Compromise
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org
©2024 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
