HTTP: Microsoft Windows OpenType Font Driver Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Windows OpenType Font Driver. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability that affects the OpenType Font (OTF) driver. To exploit this issue on Windows 7, Windows Vista, Windows Server 2008, and Windows Server 2008 R2, an attacker must entice an unsuspecting user into visiting a malicious webpage or to open a specially crafted document. To exploit this issue on Windows XP and Windows Server 2003, an attacker requires local access. An attacker can exploit this issue to execute arbitrary code in kernel mode. Successful exploits will completely compromise an affected computer. Failed attempts will result in a denial-of-service condition.

Affected Products

Avaya messaging_application_server,Microsoft windows_server_2003

References

BugTraq: 47179

CVE: CVE-2011-0034

Short Name

HTTP:STC:DL:MS-FONTMATRIX

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows OpenType Font Driver Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?