HTTP: Microsoft Windows Bitmap Fonts Remote Code Execution

This signature detects attempts to exploit a known flaw in Microsoft Bitmap Fonts. An attack can entice a user to load a malicious .fon file which can result in arbitrary code execution in the victim's machine.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a malformed file on a remote network share. Successful exploits can allow attackers to execute arbitrary code with kernel-level privileges. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Avaya messaging_application_server,Microsoft windows_xp

References

BugTraq: 49975

CVE: CVE-2011-2003

Short Name

HTTP:STC:DL:MS-FON-FILE-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows Bitmap Fonts Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?