OS-WINDOWS -- Snort has detected traffic targeting vulnerabilities in a Windows-based operating system. This does not include browser traffic or other software on the OS, but attacks against the OS itself. (such as?)
Alert Message
OS-WINDOWS Microsoft Word remote code execution attempt
Rule Explanation
This rule looks for files intended to exploit a remote code execution vulnerability in Microsoft Word on Windows systems.
What To Look For
This rule fires on attempts to exploit a remote code execution vulnerability in Microsoft Word.
An Escalation of Privilege (EOP) attack is any attack method that results in a user or application gaining permissions to access resources they normally would not have access to.
CVE Additional Information
This product uses data from the NVD API but is not endorsed or certified by the NVD.
