HTTP: Microsoft Edge PDF parser CVE-2018-8464 Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Edge PDF parser. A successful attack can lead to arbitrary code execution.

Extended Description

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge.

References

CVE: CVE-2018-8464

Short Name
HTTP:STC:DL:CVE-2018-8464-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2018-8464 Code Edge Execution Microsoft PDF Remote parser
Release Date
09/11/2018
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3415
False Positive
Unknown
CVSS Score

9.3

Found a potential security threat?