generic heuristic (JavaScript_Obfuscation_Rue)

About this signature or vulnerability

IBM Security Server Protection for Windows, Proventia Network IDS, Proventia-G 1.1 and earlier, Proventia Network MFS, RealSecure Server Sensor, RealSecure Network, Proventia Network IPS, Proventia Desktop, Virtual Server Protection for Vmware, Proventia Server IPS for Linux technology:

This signature detects a suspicious-looking sequence of JavaScript tokens employed in code obfuscation.

IBM Security Server Protection for Windows, Proventia Network IDS, Proventia-G 1.1 and earlier, Proventia Network MFS, RealSecure Server Sensor, RealSecure Network, Proventia Network IPS, Proventia Desktop, Virtual Server Protection for Vmware, Proventia Server IPS for Linux technology: It is not possible to determine if the code that triggers this event is malicious, it may be well-formed obfuscated code designed to hide intellectual property.

Default risk level

 Low

Sensors that have this signature

IBM Security Server Protection for Windows: 2.1.14.2400, IBM Security Server Protection for Windows: 1.0.914.2400, IBM Security Server Protection for Windows: 2.0.300.2400, Proventia Network IDS: XPU 29.060, Proventia-G 1.1 and earlier: XPU 29.060, Proventia Network MFS: XPU 29.060, RealSecure Server Sensor: XPU 29.060, RealSecure Network: XPU 29.060, Proventia Network IPS: XPU 29.060, Proventia Desktop: 2400, Virtual Server Protection for Vmware: 1.0, Proventia Server IPS for Linux technology: 29.060

Systems affected

Microsoft Windows

Type

Suspicious Activity

Vulnerability description

How to remove this vulnerability

References