HTTP: Apple Safari for Windows and Internet Explorer Combined Code Execution

This signature detects attempts to exploit a known vulnerability against Apple Safari and Internet Explorer for Windows. A successful attack can lead to arbitrary code execution.

Extended Description

A vulnerability in Apple Safari on the Microsoft Windows operating system stems from a combination of security issues in Safari and all versions of Windows XP and Vista that will allow executables to be downloaded to a user's computer and run without prompting. A vulnerability in Safari, known as the 'carpet-bombing' issue reported by Nitesh Dhanjani, allows an attacker to silently place malicious DLL files on a victim's computer. A problem in Internet Explorer, reported in December of 2006 by Aviv Raff, can then be used to run those malicious DLLs. An attacker can exploit this issue by tricking a victim into visiting a malicious page with Safari; the malicious files will run when the victim starts Internet Explorer.

Affected Products

Avaya messaging_application_server,Apple safari

References

BugTraq: 29445

CVE: CVE-2008-2540

Short Name

HTTP:STC:SAFARI-IE-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Apple Safari for Windows and Internet Explorer Combined Code Execution

Extended Description

Affected Products

References

Found a potential security threat?