Signature Detail
Short Name |
SHELLCODE:JS:FROMCHARCODE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SHELLCODE |
Keywords |
JavaScript Multiple FromCharCode Function Calls |
Release Date |
2013/01/17 |
Update Number |
2225 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SHELLCODE: JavaScript Multiple FromCharCode Function Calls
This signature detects JavaScript that includes multiple calls for the FromCharCode function. This function is generally used to obfuscate malicious JavaScript code and as such such scripts are suspicious. It can be an indication of an attempt to exploit a browser vulnerability. Successful attacks could result in arbitrary code execution or denial of service.
References