Snort 3 VBA decompression bug can crash Cisco detection engines
Crafted VBA data can overflow stack data and restart the Snort 3 Detection Engine; Cisco has released updates.
Stories per day · 30 days
2 RSS
Relatedautocad2dwg2autolisp1buffer-overflow1cisco1denial-of-service1detection1malware-analysis1ole1sans1snort1yara1
3 stories, newest first · one card per story
Stories tagged #vba
YARA rule detects orphaned VBA projects inside DWG files
A VirusTotal retrohunt with the rule returned only two matching samples.
Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
SANS finds AutoCAD DWG files with orphaned VBA projects that AutoCAD cannot execute.