alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS Microsoft Internet Explorer
WinZip? FolderView? ActiveX? Control Access"; flow:from_server,established; content:"CLSID"; nocase; content:"F3834A2B-19CF-4A90-BE1D-ECC410D9DA09"; nocase; reference:cve,2006-5198; classtype:web-application-activity; sid:2003181; rev:1;)