HTTP: Microsoft Office Art Property Table Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Microsoft Office document parser. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes Microsoft Office objects. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may crash applications that use the library.

Affected Products

Nortel_networks self-service_media_processing_server,Microsoft office_xp

References

BugTraq: 36650

CVE: CVE-2019-9851

URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=829

Short Name

HTTP:STC:DL:OFFICEART-PROP

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office Art Property Table Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?