HTTP: Microsoft Internet Explorer Malformed GIF File Denial of Service

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer. A successful attack can result in a denial-of-service condition. This is an old issue and current versions of the browser are immune to it.

Extended Description

Microsoft Internet Explorer is reported prone to a double free memory corruption vulnerability when processing a malformed GIF image file. This vulnerability may potentially be exploited to execute arbitrary code in the context of the currently logged in user. Exploitation attempts could also cause a denial of service. To exploit this issue, an attacker could create a malicious GIF file and entice a user to view the file through Internet Explorer. Other applications that support the GIF format may also be affected, though this has not been confirmed. An attacker could exploit this issue through various means, such as enticing a user to visit a Web page that references the malicious file or through HTML email.

Affected Products

Microsoft internet_explorer

References

BugTraq: 8530

CVE: CVE-2003-1048

URL: https://helpx.adobe.com/security/products/flash-player/apsb14-22.html http://malware.dontneedcoffee.com/2014/10/cve-2014-0569.html

Short Name

HTTP:STC:IE:MAL-GIF-DOS

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Internet Explorer Malformed GIF File Denial of Service

Extended Description

Affected Products

References

Found a potential security threat?