HTTP: Fax Cover Page Editor Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Fax Cover Page Editor. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability. The issue affects the Windows Fax Cover Page Editor component (fxscover.exe). An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Fax Cover Page file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. .

Affected Products

Avaya messaging_application_server,Microsoft windows_server_2008_for_itanium-based_systems

References

BugTraq: 45583 45942

CVE: CVE-2010-3974

URL: http://aluigi.org/adv/fxscover_1-adv.txt

Short Name

HTTP:STC:DL:FAX-EDITOR-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Fax Cover Page Editor Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?