?? 1840.txt
字號:
Rule:--Sid:1840--Summary:This event is generated when a client on the protected network has possibly visited a website containing malicious javascript code.--Impact:Minimal--Detailed Information:Implementations of Javascript in multiple browsers on multiple platformscontain an error that may lead to a user inadvertantly runningJavascript code of an attackers choosing. IP address lookup for a fullyqualified domain name is not performed when choosing whether Javascript should be executed, if the hostname is served from a DNS servercontrolled by the attacker it may be possible for the attacker to runcode of their choosing. --Affected Systems: Multiple browsers on multiple platforms.--Attack Scenarios:An attacker might try to fool a user into clicking a link in an emailthat points at an intranet server. The attacker is then able to runJavascript from a secondary host purporting to be the intranet server.--Ease of Attack:Simple--False Positives: None known--False Negatives: None known.--Corrective Action:Upgrade to the latest non-affected version of the software.--Contributors:Sourcefire Vulnerability Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com> -- Additional References:--
?? 快捷鍵說明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -