HTTP: Microsoft Excel File SST Parsing Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Excel file format. A successful attack can lead to an integer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Autonomy KeyView module is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers. Exploiting this issue will allow an attacker to corrupt memory and cause denial-of-service conditions or potentially to execute arbitrary code in the context of an application using the module. Multiple products using the KeyView module are affected.

Affected Products

Symantec mail_security_appliance,Ibm lotus_notes

References

BugTraq: 36042

CVE: CVE-2009-3037

Short Name

HTTP:STC:DL:XLS-SST

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Excel File SST Parsing Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?