HTTP: Microsoft Visual C++ Resource File Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Visual C++. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected server.

Extended Description

Microsoft Visual C++ is prone to a stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.

Affected Products

Microsoft visual_c++

References

BugTraq: 22170

CVE: CVE-2007-0468

Short Name
HTTP:STC:DL:MS-VISUAL-CPP-RC-BO
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Buffer C++ CVE-2007-0468 File Microsoft Overflow Resource Visual bid:22170
Release Date
11/05/2012
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3336
False Positive
Unknown
Vendors

Microsoft

CVSS Score

6.8

Found a potential security threat?