HTTP: Microsoft DirectX SAMI File Parsing Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft DirectX SAMI File Parsing Library. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."

References

BugTraq: 29578

CVE: CVE-2008-1444

URL: http://www.microsoft.com/technet/security/Bulletin/MS08-033.mspx

Short Name

HTTP:STC:IE:DIRECTX-SAMI-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft DirectX SAMI File Parsing Buffer Overflow

Extended Description

References

Found a potential security threat?