HTTP: Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow

This signature detects attempts to exploit a known heap buffer overflow vulnerability in Microsoft Windows Fax Services. It is due to insufficient validation of a drawing object data while parsing Microsoft Fax cover page files. Remote attackers can exploit this by enticing the target user to open a specially crafted Fax cover page file. A successful attack can result in execution of arbitrary code within the security context of the currently logged in user. An unsuccessful attempt terminates the affected application abnormally.

Short Name

HTTP:STC:WINDOWS-FAX-COVER

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow

Found a potential security threat?