HTTP: Content Advisor Ratings File Download

This signature detects the download of a Microsoft Internet Explorer Content Advisor Ratings file. This file type is associated with multiple vulnerabilities.

Extended Description

Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive data and arbitrary machine code to be processed by the browser. A typical attack would involve the attacker creating a Web site that includes the malicious file. A similar attack can also be carried out through HTML email using Microsoft Outlook and Microsoft Outlook Express applications. It should be noted that successful exploitation requires the user to follow various steps to install a malicious file.

Affected Products

Microsoft internet_explorer

References

CVE: CVE-2005-0555

URL: http://www.microsoft.com/technet/Security/bulletin/ms05-020.mspx http://www.us-cert.gov/cas/techalerts/TA05-102A.html

Short Name

HTTP:EXT:DOT-RAT

Severity

Info

Recommended

False

Recommended Action

None

HTTP: Content Advisor Ratings File Download

Extended Description

Affected Products

References

Found a potential security threat?