HTTP: Microsoft Office GDI+ Heap Overflow Vulnerability

This signature detects attempts to exploit a known vulnerability in the Microsoft Office GDI parser. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Microsoft GDI+ is prone to a remote heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may crash the affected application.

Affected Products

Avaya messaging_application_server,Avaya meeting_exchange

References

BugTraq: 53351

CVE: CVE-2012-0167

Short Name

HTTP:STC:DL:OFF-GDI-HOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office GDI+ Heap Overflow Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?