Rule Release for Today, Tuesday October 12th, 2010
Summary: Cisco Talos released a batch of Snort rules on Tuesday, October 12th, 2010, to accompany Microsoft's monthly patch set, covering advisories MS10-070 through MS10-085. The rules detect attacks against flaws including .NET Framework information disclosure that lets an attacker decrypt and modify encrypted data, Internet Explorer code execution and cross-site scripting, Windows Media Player and its Firefox plugin, OpenType font parsing, Word, Excel, and an IIS denial of service.
Bottom line: The .NET flaw in MS10-070 lets an attacker decrypt and modify encrypted data through error responses alone, and the release updates only two existing rules (SIDs 17428 and 17429) to catch it - detection coverage for a data-integrity break that leaves no obvious trace.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026