Intrusion PreventionMS.IE.VBScript.Regular.Expression.Information.Disclosure
Description
This indicates an attack attempt against an Information Disclosure vulnerability in Microsoft's VBScript engine.
The vulnerability is due to improper validation of user supplied data when handling crafted HTTP Requests. A remote attacker can exploit this to disclose memory contents and then bypass ASLR feature on the affected machines via crafted packets.
Affected Products
Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
Microsoft Internet Explorer 10
Microsoft Internet Explorer 11
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems
Recommended Actions
Apply the most recent upgrade or patch from the vendor
https://technet.microsoft.com/en-us/library/security/MS15-043
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 40636 |
| Created | Jul 07, 2015 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2015-1684 |
| Exploit Prediction Score | 92.75% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |