HTTP: Microsoft Office XP HTML Link Processing Remote Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Microsoft Office XP. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

A remote buffer overflow vulnerability affects Microsoft Office XP. The problem presents itself when an unsuspecting user follows a malicious HTML link that points to a Office document. A boundary condition error is exposed during this operation that may allow attacker-specified data to corrupt process memory. An attacker may leverage this issue to execute arbitrary code with the privileges of an unsuspecting user that follows a malicious embedded link.

Affected Products

Microsoft office_xp

References

BugTraq: 12480

CVE: CVE-2004-0848

Short Name

HTTP:STC:MS-OFFICE-XP-HTML-LINK

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office XP HTML Link Processing Remote Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?