Signature Detail

SCAN: Metasploit ie_execcommand_uaf Exploit

This signature detects the MetaSploit Framework module 'ie_execcommand_uaf' as it attempts to exploit a zero-day vulnerability in Internet Explorer. Internet Explorer is vulnerable to a remote code execution exploit due to a use-after-free error in the CMshtmlEd::Exec() function. A successful exploit may result in arbitrary code execution as the user.

References

• BugTraq: 55562
• URL: http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/
• URL: http://labs.alienvault.com/labs/index.php/2012/new-internet-explorer-zero-day-being-exploited-in-the-wild/
• URL: http://technet.microsoft.com/en-us/security/advisory/2757760