BROWSER-CHROME -- Snort has detected suspicious traffic known to exploit vulnerabilities present in the Chrome browser. These rules are separate from the "browser-webkit" category; while it uses the Webkit rendering engine, there's a lot of other features to create a secondary Chrome category.
BROWSER-CHROME Chrome JavaScript Array.map Out-of-Bounds Write attempt
This rule looks for a file sent over FTP, HTTP, IMAP, and POP3 for specific JavaScript code used in the Metasploit module that exploits this vulnerability.
This rule fires on an attempt to execute an Array.map() out-of-bounds write in Chrome.
Attacks/Scans seen in the wild
No known false positives
Cisco Talos Intelligence Group
Tactic: Execution
Technique: JavaScript
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org
Memory Corruption
Memory Corruption is any vulnerability that allows the modification of the content of memory locations in a way not intended by the developer. Memory corruption results are inconsistent; they could lead to fatal errors and system crashes or data leakage; some have no effect at all.
©2023 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
