HTTP: Windows Metafile Heap Overflow

This signature detects metafiles that contain invalid size information being sent over HTTP. Attackers can use Windows Metafiles and Enhanced Metafiles to exploit vulnerabilities in the Windows Graphical Device Interface. Metafiles can appear as an attachment or link within an e-mail message; the target user must activate the metafile for the exploit to occur. If the exploit is successful, attackers can deposit instructions or arbitrary code on a target system.

Extended Description

Microsoft Windows WMF/EMF image-rendering library is affected by a remote buffer-overflow vulnerability because it fails to properly verify the lengths of strings contained within an affected image file before copying them into finite buffers. Any code execution that occurs will take place with SYSTEM privileges because of the nature of the affected library. This will also permit local privilege-escalation attacks.

Affected Products

Avaya s8100_media_servers,Microsoft windows_xp_media_center_edition

References

BugTraq: 11375

CVE: CVE-2004-0209

URL: http://www.internetfixes.com/file_ext.htm

Short Name

HTTP:STC:DL:WMF-HEAPOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Windows Metafile Heap Overflow

Extended Description

Affected Products

References

Found a potential security threat?