HTTP: Microsoft Wordpad Word Converter XST Structure Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Wordpad. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Microsoft WordPad is prone to a remote code-execution vulnerability because of an unspecified error that may result in corrupted memory. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions.

Affected Products

Avaya messaging_application_server,Microsoft windows_server_2003_enterprise_edition_itanium

References

BugTraq: 32718

CVE: CVE-2008-4841

Short Name

HTTP:STC:DL:MS-WORD-XST-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Wordpad Word Converter XST Structure Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?