HTTP: Microsoft Windows Graphics Rendering Engine BMP File Parsing Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Windows Graphics Rendering Engine component. An attacker can exploit this vulnerability by enticing a user to open a malicious BMP file. A successful attack can lead to a interger overflow and arbitrary remote code execution with the privileges of the currently logged in user.

Extended Description

Microsoft GDI+ is prone to an integer-overflow vulnerability. An attacker can exploit this issue by enticing unsuspecting users to view a malicious BMP file. Successfully exploiting this issue allows remote attackers to corrupt memory and execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Nortel_networks self-service_speech_server,Research_in_motion blackberry_unite!

References

BugTraq: 31022

CVE: CVE-2008-3015

Short Name

HTTP:STC:IMG:MS-BMP-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows Graphics Rendering Engine BMP File Parsing Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?