Signature Detail
Short Name |
HTTP:STC:SCRIPT:PAYLOAD-SETUP |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
buffer setup JavaScript VBScript |
Release Date |
2009/08/05 |
Update Number |
1479 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Script Evasion Payload Setup
This signature detects attempts to exploit a known JavaScript/VBScript evasion technique. Many common Web browsers and servers are affected. The technique is a simple insertion loop that allows inserting a no-op landing pad for exploit. This reduces the size of transferred exploits.