SID 1:63684

Rule Category

FILE-OTHER -- Snort detected traffic targeting vulnerabilities in a file type that does not require enough rule coverage to have its own category.

Alert Message

FILE-OTHER Adobe DNG SDK DecodeImage out of bounds read attempt

Rule Explanation

This rule detects the attempted download of a malicious DNG file used to exploit vulnerable versions of Adobe DNG SDK by looking for specific bytes used in the malicious file.

What To Look For

This rule detects the attempted download of a malicious DNG file used to exploit vulnerable versions of Adobe DNG SDK.

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group