HTTP: Microsoft Windows Win32k EOT Parsing Integer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Windows Win32k EOT. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability that may affect the Embedded OpenType font engine. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will completely compromise affected computers.

Affected Products

Avaya messaging_application_server,Microsoft windows_2000_professional

References

BugTraq: 36029

CVE: CVE-2009-2514

Short Name

HTTP:STC:DL:EOT-IO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows Win32k EOT Parsing Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?