HTTP: Internet Explorer Install Engine Integer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer Install Engine. Attackers can create a malicious Web site that, when visited by a user, enables attackers to install and run software on a target machine with the user's privileges.

Extended Description

A remotely exploitable buffer overflow vulnerability exists in the Microsoft Internet Explorer Install Engine ActiveX control. This vulnerability is caused by insufficient bounds checking of arguments passed to the control leading to a heap overflow. The vulnerability may be exploited to execute arbitrary code in the context of the client user.

Affected Products

Avaya s8100_media_servers,Microsoft internet_explorer

References

BugTraq: 11366

CVE: CVE-2004-0216

URL: http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx http://www.us-cert.gov/cas/techalerts/TA04-293A.html

Short Name

HTTP:STC:IE:INST-ENG-INT-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Internet Explorer Install Engine Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?