SHELLCODE: Encoded Shellcode in Javascript
This signature detects unicoded shellcode in HTML. The presence of a unicoded shellcode value in an HTML page indicates that something malicious is occurring. It is recommended that you check the Web page contents before running any script included in this page. Some known cases have resulted in remote arbitrary code execution.
References
CVE: CVE-2011-3400
URL: http://www.russellcottrell.com/greek/utilities/UnicodeRanges.htm http://support.apple.com/kb/ht5261 http://www.zerodayinitiative.com/advisories/zdi-12-077/ http://www.securityfocus.com/archive/1/479096/30/0/threaded http://www.mozilla.org/security/announce/2011/mfsa2011-13.html http://www.zerodayinitiative.com/advisories/zdi-11-158/ https://bugzilla.mozilla.org/show_bug.cgi?id=634986 http://technet.microsoft.com/en-us/security/bulletin/ms11-093
Short Name
SHELLCODE:JS:UNICODE-ENC
Severity
Major
Recommended
False
Recommended Action
None
Category
SHELLCODE
Keywords
CVE-2007-3040 CVE-2009-2477 CVE-2010-0249 CVE-2010-1759 CVE-2010-1939 CVE-2011-0065 CVE-2011-3400 CVE-2012-0667 CVE-2013-3897 Encoded Javascript Shellcode bid:31987 bid:47659 bid:50977 in
Release Date
05/03/2006
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3707
False Positive
Rarely
CVSS Score
9.3