APP: Microsoft Universal Plug and Play Invalid Header Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Windows Universal Plug and Play. A successful attack can lead to a buffer overflow and arbitrary remote code execution resulting in full control of the target system.

Extended Description

Microsoft Windows is prone to a remote stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. This occurs when handling certain HTTP requests. To exploit this issue, an attacker must be in the same network segment as the victim. Successful exploits may allow attackers to execute arbitrary code with the privileges of the affected service. Failed exploits attempts will likely result in denial-of-service conditions.

Affected Products

Microsoft windows_xp_tablet_pc_edition

References

BugTraq: 23371

CVE: CVE-2007-1204

URL: http://www.securitytracker.com/id?1017895

Short Name

APP:UPNP:MS-UPNP

Severity

Critical

Recommended

False

Recommended Action

Drop

APP: Microsoft Universal Plug and Play Invalid Header Overflow

Extended Description

Affected Products

References

Found a potential security threat?