Signature Detail
Short Name |
HTTP:STC:FILE-UTF7 |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
UTF-7 Evasion File Client UTF7 |
Release Date |
2010/09/22 |
Update Number |
1777 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Multiple Client UTF-7 File Evasion
This signature detects Web pages containing UTF-7 encoded data. A malicious Web site can construct UTF-7 data files in an attempt at subverting various detection mechanisms resulting in undetected exploitation of the victim's computer.
References