Intrusion PreventionGoogle.Chrome.And.Apple.Safari.WebKit.Remote.Code.Execution
Description
This indicates an attack attempt to exploit a Remote Code Execution vulnerability in Google Chrome and Apple Safari.
The vulnerability is due to a use-after free condition while handling run-in boxes. An attacker can trick an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the application.
Affected Products
Google Chrome prior to 18.0.1025.151
Apple Computer Safari prior to 5.1.4
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://support.google.com/chrome/bin/answer.py?hl=en&answer=95414
http://www.apple.com/safari/download/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 31685 |
| Created | May 03, 2012 |
| Updated | Apr 24, 2014 |
| Risk |
|
| CVE ID | CVE-2011-3068 |
| Exploit Prediction Score | 36.75% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Apple, Other |