New sig for microsoft advisory 911302

[s.breault]

Good day,

can anybody tell me if there will be a signature released shortly for the IE vulnerability that deal with the java script, precisely microsoft advisory 911302, 2005 Nov 21.

[rgrcommo]

http://tools.cisco.com/MySDN/Intelligence/home.x

you can try the link above for the latest info.

[darin.marais]

Apparently there is a signature available but I cannot tell you which signature update is required in order to get the signature

http://tools.cisco.com/MySDN/Intelligence/home.x

[jdal]

This is covered by signature 5477-2 that was released last monday in the S202 signature update.

[darin.marais]

i am using 4.1.5 s202 and according to my NSDB, i only have IDS signatures:

5477.0 - Possible Heap Payload Construction

5477.1 - Possible Heap Payload Construction

is this a version 5 only signature.

[jdal]

No,this is not a 5.x only signature. There is a 4.x version as well.

5477.2 - Possible Heap Payload Construction