HTTP: Microsoft XML Core Services MIME Viewer Memory Corruption

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer. All versions of Microsoft Windows using Microsoft XML Core Services 3.0 are vulnerable. Attackers can leverage this vulnerability to execute arbitrary code on the victim.

Extended Description

Microsoft XML Core Services (MSXML) is prone to a remote memory-corruption vulnerability because of a race condition that may cause a NULL-pointer dereference, read or write operations to invalid addresses, or other memory-corruption issues. Attackers may exploit this issue to execute arbitrary machine code in the context of the vulnerable application. Failed exploit attempts will likely crash the application. NOTE: SANS has provided new information that lowers the impact of this vulnerability. Please see the reference section for details.

Affected Products

Nortel_networks self-service_media_processing_server,Nortel_networks self-service-ccss7

References

CVE: CVE-2007-0099

URL: http://www.microsoft.com/technet/security/bulletin/ms08-069.mspx

Short Name

HTTP:STC:IE:XML-MIME-CORRUPT

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft XML Core Services MIME Viewer Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?