HTTP: Microsoft Windows AVI File List Length Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Windows AVI API. A successful attack can lead to a buffer overflow and arbitrary remote code execution.

Extended Description

Microsoft Windows is prone to a remote integer-overflow vulnerability that arises when an affected Windows component handles a malicious Audio Video Interleave (AVI) file. An attacker can exploit this issue to execute arbitrary code with the privileges of the affected user. Failed exploit attempts will result in a denial-of-service condition. NOTE: Since the affected Windows operating system component is independent of Windows Media Player, this issue does not specifically affect Windows Media Player.

Affected Products

Nortel_networks self-service_mps_1000,Microsoft windows_vista

References

BugTraq: 35970

CVE: CVE-2009-1546

Short Name

HTTP:STC:DL:AVI-LIST-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows AVI File List Length Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?