HTTP: Microsoft Windows MJPEG Media Decompression Code Execution

This signature detects attempts to exploit a known vulnerability in the Microsoft Windows DirectShow component. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability when handling compressed media files. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user. Failed attack attempts may result in a denial-of-service condition.

Affected Products

Avaya messaging_application_server,Microsoft windows_server_2008_for_itanium-based_systems

References

BugTraq: 40464

CVE: CVE-2010-1880

Short Name

HTTP:STC:STREAM:DIRECTSHOW-MJPG

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows MJPEG Media Decompression Code Execution

Extended Description

Affected Products

References

Found a potential security threat?