HTTP: Microsoft Office PNG Image Filter Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Office. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Office is prone to a remote code-execution vulnerability when handling a malformed PNG graphic file. The issue occurs when an Office application such as Excel, Word, or PowerPoint tries to open a malformed PNG graphic file. An attacker could exploit this vulnerability to cause memory corruption and subsequently to execute malicious code in the context of the user running the affected application.

Affected Products

Microsoft office_2003

References

BugTraq: 18913

CVE: CVE-2006-0033

Short Name

HTTP:STC:DL:MS-PNG-IMG-CE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office PNG Image Filter Code Execution

Extended Description

Affected Products

References

Found a potential security threat?