HTTP: Suspicious URL Detected

This signature detects a suspicious HTTP URL value. This kind of behavior is mostly observed when someone is trying to scan and send malicious traffic against a network security device using various traffic generation tools. This signature may trigger false-positives inside the Intranet traffic, so it is suggested to avoid using it for inspecting such traffic. This signature is highly recommended to protect web servers and devices deployed at a data centre.

Extended Description

Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted toolbar object, aka "Toolbar Use After Free Vulnerability."

Affected Products

Microsoft windows_rt_8.1

References

CVE: CVE-2015-2515

Short Name

HTTP:DOS:SUSPICIOUS-URL

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Suspicious URL Detected

Extended Description

Affected Products

References

Found a potential security threat?