HTTP: Microsoft Windows MSI File Signature Spoofing

This signature detects attempts to exploit a known vulnerability against Microsoft Windows. A successful attack can lead to spoofing of content.

Extended Description

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.

Affected Products

Microsoft windows_10_1803

References

CVE: CVE-2020-1464

Short Name

HTTP:STC:MICROSOFT-MSI-SPOOFING

Severity

Warning

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Windows MSI File Signature Spoofing

Extended Description

Affected Products

References

Found a potential security threat?