HTTP: Overlarge EMBED Tag Source

This signature detects long source attributes in <embed> tags. A malicious Web page can contain these tags and attempt to crash the target's browser. A successful result can lead to possible code execution.

Extended Description

The Microsoft Windows Media Player plugin for non-Microsoft browsers is prone to a buffer-overflow vulnerability. The application fails to do proper boundary checks on user-supplied data before using it in a finite-sized buffer. An attacker can exploit this issue to execute arbitrary code on the victim user's computer in the context of the victim user. This may facilitate a compromise of the affected computer. This issue is exploitable only through non-Microsoft browsers that have the Media Player plugin installed. Possible browsers include Firefox .9 and later and Netscape 8; other browsers with the plugin installed may also be affected.

Affected Products

Microsoft windows_xp_media_center_edition

References

BugTraq: 16644 32595

CVE: CVE-2008-4261

URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=761

Short Name

HTTP:STC:EMBED-SRC-OF

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Overlarge EMBED Tag Source

Extended Description

Affected Products

References

Found a potential security threat?