LDAP: Microsoft Windows LDAP SearchResultDone Parsing Integer Overflow
This signature detects attempts to exploit a known vulnerability against Microsoft Windows LDAP. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the Microsoft Windows LDAP.
Extended Description
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected Products
Microsoft windows_10_1607
References
CVE: CVE-2024-49112
Short Name
LDAP:WINDOWS-SEARCH-PARSING-BO
Severity
Major
Recommended
True
Recommended Action
Drop
Category
LDAP
Keywords
CVE-2024-49112 Integer LDAP Microsoft Overflow Parsing SearchResultDone Windows
Release Date
01/31/2025
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3779
False Positive
Unknown
Vendors
Microsoft