Commit 10613b7f by mmorenog Committed by GitHub

Update and rename CVE_Rules.yar to CVE_Rules/CVE-2010-0887.yar

parent 4a5ddd98
......@@ -20,17 +20,3 @@ rule JavaDeploymentToolkit
3 of them
}
rule MSIETabularActivex
{
meta:
ref = "CVE-2010-0805"
impact = 7
hide = true
author = "@d3t0n4t0r"
strings:
$cve20100805_1 = "333C7BC4-460F-11D0-BC04-0080C7055A83" nocase fullword
$cve20100805_2 = "DataURL" nocase fullword
$cve20100805_3 = /value\=\"http:\/\/(.*?)\"/ nocase fullword
condition:
($cve20100805_1 and $cve20100805_3) or (all of them)
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment