ET WEB_CLIENT Internet Explorer execCommand function Use after free Vulnerability 0day Metasploit 2

alert http $EXTERNAL_NET any -> $HOME_NET any (
    msg:"ET WEB_CLIENT Internet Explorer execCommand function Use after free Vulnerability 0day Metasploit 2";
    flow:established,to_client;
    file_data;
    content:"execCommand"; nocase;
    content:"YMjf";
    content:"u0c08"; distance:1; within:6;
    content:"u0c0cKDog"; distance:1; within:10; fast_pattern;
    reference:url,eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/;
    reference:cve,CVE-2012-4969;
    classtype:attempted-user;
    sid:2020099; rev:9;
    metadata:affected_product Web_Browsers, affected_product Any, affected_product Web_Browser_Plugins, attack_target Client_and_Server, created_at 2015_01_06, deployment Perimeter, deployment Internet, deployment Internal, deployment Datacenter, confidence Low, signature_severity Major, tag Web_Client_Attacks, tag Metasploit, tag CISA_KEV, updated_at 2024_11_26, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1189, mitre_technique_name Drive_by_Compromise;
    target:dest_ip;
)