MS 09-054

alert tcp any 80 -> any any (msg:”MS IE 5/6/7 Memory Corruption [MS09-054] 1″; flow:from_server; content:”|0D 0A|Content|3D|Encoding|3A|”; pcre:”/\s+deflate[\r\t\n]+/Ri”; )

Advertisements

About this entry