HTTP: VML Recolorinfo Heap Overflow

This signature detects attempts to exploit a known vulnerability against the Vector Markup Language (VML) implementation in various browsers. An attacker could attempt to trick a user to view a hostile Web page or view a file containing vulnerable code, causing a heap overflow and ultimately taking over the remote computer.

Extended Description

Microsoft Windows is prone to a buffer-overrun vulnerability that arises because of an error in the processing of Vector Markup Language documents. An attacker can exploit this issue to execute arbitrary code within the context of the affected application.

Affected Products

Avaya s8100_media_servers,Microsoft windows_2000_server

References

BugTraq: 21930

CVE: CVE-2010-1179

URL: http://www.microsoft.com/technet/security/Bulletin/MS07-004.mspx

Short Name

HTTP:STC:VML-NUM-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: VML Recolorinfo Heap Overflow

Extended Description

Affected Products

References

Found a potential security threat?