SMTP: ANI Attachment

This signature detects a Windows Animated Cursor file being sent as an attachment. ANI files are not normally sent through e-mail. Some versions of Microsoft Outlook are vulnerable to a malformed ANI file header. A successful attack can allow an attacker to run code at user level privilege.

Extended Description

Microsoft Internet Explorer is affected by an WMF image-parsing memory-corruption vulnerability. This issue is allegedly due to an integer-overflow flaw that leads to corrupted heap memory. This problem presents itself when a user views a malicious WMF-formatted file containing specially crafted data. This issue allows remote attackers to execute arbitrary machine code in the context of the affected application. Failed exploitation attempts likely result in crashing the application.

Affected Products

Nortel_networks self-service_media_processing_server,Nortel_networks optivity_telephony_manager_tm-cs1000

References

CVE: CVE-2007-0038

URL: http://www.microsoft.com/technet/security/advisory/935423.mspx http://www.microsoft.com/technet/security/Bulletin/MS07-017.mspx

Short Name

SMTP:MAL:ANI-ATTACH

Severity

Info

Recommended

False

Recommended Action

None

SMTP: ANI Attachment

Extended Description

Affected Products

References

Found a potential security threat?