HTTP: Microsoft Office Uniform Resources Locator Vulnerability

This signature detects incorrectly directed OneNote URLs in HTTP traffic. Malicious Web sites can redirect users to these URLs to gain control of vulnerable browsers. Computers running Microsoft Office 2007 are vulnerable.

Extended Description

Microsoft Office OneNote is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to follow maliciously crafted URIs. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

Microsoft office_2007

References

CVE: CVE-2008-3007

URL: http://www.microsoft.com/technet/security/Bulletin/MS08-055.mspx

Short Name

HTTP:STC:IE:ONENOTE-URL

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office Uniform Resources Locator Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?