Intrusion Prevention

MS.IE.VBScript.Regular.Expression.Information.Disclosure

Description

This indicates an attack attempt against an Information Disclosure vulnerability in Microsoft's VBScript engine.
The vulnerability is due to improper validation of user supplied data when handling crafted HTTP Requests. A remote attacker can exploit this to disclose memory contents and then bypass ASLR feature on the affected machines via crafted packets.

Affected Products

Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
Microsoft Internet Explorer 10
Microsoft Internet Explorer 11

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems

Recommended Actions

Apply the most recent upgrade or patch from the vendor
https://technet.microsoft.com/en-us/library/security/MS15-043

CVE References

CVE-2015-1684