Sigs for the current Microsoft vulnerability

[DFiore]

Hello All,

Has signature been published for the current "createTextRange" vulnerability in MS IE? Any info is greatly appreciated.

Thanks, Dave

[DFiore]

Or - is the current IE vulnerability the "same as" the signature #5737/0 (Internet Explorer Action Handlers Overflow) released on 17 Mar 2006 in signature set S222 ?

[wsulym]

Currently, all exploits we've seen and tested have triggered 5477-2. 5477-2 is a generic sig catching suspicious activity in return web traffic. As of this moment, there are no plans on adding anything additional for this vulnerability.

[jlimbo]

Hi Dave,

If you look at the mysdn homepage you can click on the threat and see that it is covered by signature 5477-2.

Hope that helps,

Jonathan

[DFiore]

Thank you both. This answers my question.