HTTP: Microsoft .NET Framework Heap Corruption (2)

This signature detects attempts to exploit a known vulnerability in Microsoft's .NET Framework. It is due to an error in calculating a buffer length for percent-encoded URI components of a UTF-8 encoded URI. Remote attackers could exploit this vulnerability by enticing a target user to either download and execute a malicious XAML browser application, or download and execute a malicious .NET application. A successful exploitation attempt could result in the execution of arbitrary code in the security context in which the .NET application runs.

Short Name

HTTP:MS-DOT-NET-HEAP-CORRUPT-2

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Microsoft .NET Framework Heap Corruption (2)

Found a potential security threat?