IPS Signatures

Adobe PDF Code Execution

Signature ID: 6784

Original Release: S509

Release: S509

Original Release Date: 2008 Mar 11

Latest Release Date: 2010 Aug 24

Default Enabled: N

Default Retired: True

Alarm Severity: High

Fidelity: 90


Description:

Adobe Reader suffers from numerous remote code execution avenues. This signature looks for Collab.collectEmailInfo(s,s,s which is an exploit specific approach.

Recommended Filter:

There are no suggested filters.

Benign Triggers:

There are no known benign triggers.

  1. Return to Cisco Services for IPS
  2. Return to Cisco Security          
  3. Go to Cisco.com