Signature Detail
Short Name |
HTTP:STC:IE:ADDFAVORITE-BOF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Internet Explorer AddFavorite Method Buffer Overflow |
Release Date |
2012/12/12 |
Update Number |
2210 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Internet Explorer AddFavorite Method Buffer Overflow
This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer AddFavorite method. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected user.
Extended Description
Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Reports indicate that this issue may be used to corrupt process memory and be leveraged to execute code, but this has not been confirmed. Internet Explorer 7 and 8 are known to be vulnerable; other versions may be affected as well.
Affected Products
- Microsoft Internet Explorer 7.0
- Microsoft Internet Explorer 8
References
- BugTraq: 35620
- CVE: CVE-2009-2433