Signature Detail

HTTP: Microsoft Windows Movie Maker and Producer Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Movie Maker. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

Microsoft Movie Maker and Producer are prone to a buffer-overflow vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the applications. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft producer_2003
• Microsoft windows_movie_maker 2.1
• Microsoft windows_movie_maker 2.6
• Microsoft windows_movie_maker 6.0

References

• BugTraq: 38515
• CVE: CVE-2010-0265
• URL: http://www.coresecurity.com/content/movie-maker-heap-overflow