HTTP: Microsoft Paint JPEG Image Parsing Integer Overflow

This signature detects attempts to exploit a known integer overflow vulnerability in Microsoft Paint, shipped with various versions of Microsoft Windows. It is due to an input validation error while parsing specially crafted JPEG image files. Remote attackers can exploit this by enticing target users to open maliciously crafted JPEG image files in a vulnerable version of MS Paint. A successful attack can cause a heap buffer overflow that can lead to arbitrary code execution in the security context of the logged in user. In an unsuccessful attack, the affected application can abnormally terminate.

Extended Description

Microsoft Paint is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Avaya messaging_application_server,Microsoft windows_xp_tablet_pc_edition

References

BugTraq: 38042

CVE: CVE-2010-0028

Short Name

HTTP:STC:IMG:PAINT-JPEG-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Paint JPEG Image Parsing Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?