Rule Category

FILE-OFFICE -- Snort detected traffic targeting vulnerabilities in files belonging to the Microsoft Office suite of software (Excel, PowerPoint, Word, Visio, Access, Outlook, etc.).

Alert Message

FILE-OFFICE ClamAV OLE2 file parsing denial of service attempt

Rule Explanation

This rule looks for malformed OLE2 files that may cause denial of service in the ClamAV scanning engine.

What To Look For

This rule alerts on denial of service attempts against ClamAV.

Known Usage

No public information

False Positives

No known false positives


Cisco Talos Intelligence Group

Rule Groups

No rule groups



Additional Links

Rule Vulnerability

No information provided

CVE Additional Information

This product uses data from the NVD API but is not endorsed or certified by the NVD.