SMTP: BMP Malformed Header Buffer Overflow

This signature detects the e-mail transmission of a Windows Bitmap (.bmp) file containing a maliciously crafted header. Viewing this image in Windows Media Player can exploit a buffer overflow condition, leading to arbitrary code execution.

Extended Description

Microsoft Windows Media Player is prone to a remote buffer-overflow vulnerability. The vulnerability arises when the application handles a skin file containing a specially crafted bitmap image. This issue can also be triggered by just supplying a malicious bitmap to the application. Note, however, that Windows Media Player is not the default handler for bitmap files. A successful attack can corrupt process memory and result in arbitrary code execution. This may facilitate a remote compromise in the context of the vulnerable user.

Affected Products

Nortel_networks mcs_5100

References

BugTraq: 16633

CVE: CVE-2006-0006

URL: http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx http://www.kb.cert.org/vuls/id/291396 http://www.us-cert.gov/cas/techalerts/TA06-045A.html

Short Name

SMTP:MAL:BMP-MAL-HEADER

Severity

Minor

Recommended

False

Recommended Action

None

SMTP: BMP Malformed Header Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?