topic Re: Enhanced Metafile Buffer Overflow, 5694 in Network Security https://community.cisco.com/t5/network-security/enhanced-metafile-buffer-overflow-5694/m-p/668613#M88288 <HTML><HEAD></HEAD><BODY><P>Hi Darin,</P><P></P><P>We would like to look into this further, can you please provide a traffic sample or at least an output of produce verbose alert.</P><P></P><P>Thanks,</P><P>Jonathan</P></BODY></HTML> Thu, 16 Nov 2006 09:01:36 GMT jlimbo 2006-11-16T09:01:36Z Enhanced Metafile Buffer Overflow, 5694 https://community.cisco.com/t5/network-security/enhanced-metafile-buffer-overflow-5694/m-p/668612#M88287 <P>Clients connecting to yahoo mail at 217.12.10.252 via an http proxy server are triggering hundreds of events for Enhanced Metafile Buffer Overflow, id = 5694. Sig Version: S201</P><P></P><P>Are others seeing the same? </P><P>Is this false positive?</P> Sun, 10 Mar 2019 10:19:40 GMT https://community.cisco.com/t5/network-security/enhanced-metafile-buffer-overflow-5694/m-p/668612#M88287 darin.marais 2019-03-10T10:19:40Z Re: Enhanced Metafile Buffer Overflow, 5694 https://community.cisco.com/t5/network-security/enhanced-metafile-buffer-overflow-5694/m-p/668613#M88288 <HTML><HEAD></HEAD><BODY><P>Hi Darin,</P><P></P><P>We would like to look into this further, can you please provide a traffic sample or at least an output of produce verbose alert.</P><P></P><P>Thanks,</P><P>Jonathan</P></BODY></HTML> Thu, 16 Nov 2006 09:01:36 GMT https://community.cisco.com/t5/network-security/enhanced-metafile-buffer-overflow-5694/m-p/668613#M88288 jlimbo 2006-11-16T09:01:36Z Re: Enhanced Metafile Buffer Overflow, 5694 https://community.cisco.com/t5/network-security/enhanced-metafile-buffer-overflow-5694/m-p/668614#M88289 <HTML><HEAD></HEAD><BODY><P>i dont have one right now. i will try to collect one for you.</P></BODY></HTML> Thu, 16 Nov 2006 10:35:47 GMT https://community.cisco.com/t5/network-security/enhanced-metafile-buffer-overflow-5694/m-p/668614#M88289 darin.marais 2006-11-16T10:35:47Z