HTTP: Microsoft Uniscribe Font Parsing Engine Memory Corruption

This signature detects attempts to exploit a known vulnerability against the Microsoft Uniscribe Font Parser. Attackers can corrupt memory on the victim's computer resulting in remote command execution.

Extended Description

Microsoft Windows and Office are prone to a remote code-execution vulnerability when handling crafted font data. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user. Failed attack attempts may result in a denial-of-service condition.

Affected Products

Avaya messaging_application_server,Microsoft windows_server_2003_standard_edition

References

BugTraq: 43068

CVE: CVE-2010-2738

Short Name

HTTP:STC:IE:UNISCRIBE-FNPS-MC

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Uniscribe Font Parsing Engine Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?