rule Internet_Explorer_8_0day
{
 meta:
     author = "Jaime Blasco"
     version = "v0.1"
     ref0 = "http://dev.metasploit.com/redmine/projects/framework/repository/revisions/aac41e91fd38f99238971892d61ead4cfbedabb4/entry/modules/exploits/windows/browser/ie_execcommand_uaf.rb"

 strings:
	$s1 = "YMjf\\u0c08\\u0c0cKDogjsiIejengNEkoPDjfiJDIWUAzdfghjAAuUFGGBSIPPPUDFJKSOQJGH"
	$s2 = "document.execCommand(\"selectAll\")"

 condition:
     all of them
}