HTTP: Microsoft Windows DirectShow AVI File Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Windows Media Player. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Windows is prone to a remote buffer-overflow vulnerability when handling specially crafted Audio Video Interleave (AVI) files. Specifically, this issue arises in the Microsoft MPEG Layer-3 codecs. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user. Failed attack attempts may result in a denial-of-service condition.

Affected Products

Avaya messaging_application_server,Microsoft windows_vista

References

BugTraq: 39303

CVE: CVE-2010-0480

Short Name

HTTP:STC:DIRECTSHOW-AVI-EXEC

Severity

Critical

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows DirectShow AVI File Code Execution

Extended Description

Affected Products

References

Found a potential security threat?