Intrusion PreventionMS.IE.SVG.Element.Handling.ASLR.Bypass
Description
This indicates an attack attempt to exploit an Invalid Memory Access vulnerability in Microsoft Internet Explorer.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted HTML file. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and bypass ASLR on vulnerable systems.
Affected Products
Internet Explorer 6
Internet Explorer 7
Internet Explorer 8
Internet Explorer 9
Internet Explorer 10
Internet Explorer 11
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://technet.microsoft.com/security/bulletin/MS15-065
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 40903 |
| Created | Jul 14, 2015 |
| Updated | Nov 16, 2015 |
| Risk |
|
| CVE ID | CVE-2015-2421 |
| Exploit Prediction Score | 9.03% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | IE |