SID 1:51102

Rule Category

OS-MOBILE -- Snort has detected traffic targeting vulnerabilities in a mobile-based operating system. This does not include browser traffic or other software on the OS, but attacks against the OS itself.

Alert Message

OS-MOBILE Microsoft Outlook for Android stored cross-site script attempt

Rule Explanation

This event is generated when an attempt to exploit an stored cross-site script in Outlook for Android has been detected Impact: High Details: A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim Ease of Attack:

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group