BROWSER-CHROME -- Snort has detected suspicious traffic known to exploit vulnerabilities present in the Chrome browser. These rules are separate from the "browser-webkit" category; while it uses the Webkit rendering engine, there's a lot of other features to create a secondary Chrome category.
BROWSER-CHROME Chrome JavaScript Array.map Out-of-Bounds Write attempt
This rule looks for a file sent over SMTP for specific JavaScript code used in the Metasploit module that exploits this vulnerability.
This rule fires on an attempt to execute an Array.map() out-of-bounds write in Chrome.
Attacks/Scans seen in the wild
No known false positives
Cisco Talos Intelligence Group
Tactic: Execution
Technique: JavaScript
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org
Memory Corruption
Memory Corruption is any vulnerability that allows the modification of the content of memory locations in a way not intended by the developer. Memory corruption results are inconsistent; they could lead to fatal errors and system crashes or data leakage; some have no effect at all.
©2023 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
