SHELLCODE: Malicious Use of JavaScript Unescape

This signature detects potentially malicious data in JavaScript. A successful attack could result in arbitrary code execution.

Extended Description

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as exploited in the wild in May 2014, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0310.

Affected Products

Microsoft internet_explorer

References

BugTraq: 19181 64123 55562

CVE: CVE-2012-4969

URL: https://technet.microsoft.com/en-us/library/security/ms14-029 http://technet.microsoft.com/security/bulletin/ms13-097 http://www.mozilla.org/security/announce/2006/mfsa2006-45.html http://technet.microsoft.com/en-us/security/advisory/2757760

Short Name

SHELLCODE:JS:MAL-UNESCAPE

Severity

Major

Recommended

False

Recommended Action

Drop

SHELLCODE: Malicious Use of JavaScript Unescape

Extended Description

Affected Products

References

Found a potential security threat?