Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

DOS:IP:PGM

Severity

Medium

Recommended

No

Category

DOS

Keywords

Microsoft PGM Denial of Service

Release Date

2006/09/12

Update Number

1213

Supported Platforms

idp-4.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

APP: Microsoft PGM Denial of Service


This signature detects attempts to exploit a known vulnerability against Microsoft's Pragmatic Multicast Control. A successful attack can result in a denial-of-service condition.

Extended Description

Microsoft Pragmatic General Multicast (PGM) is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds-check externally supplied data. An attacker can exploit this issue to execute arbitrary code, facilitating a complete system compromise. This issue affects systems only when Microsoft Message Queuing (MSMQ) 3.0 is installed; this is not the default.

Affected Products

  • HP Storage Management Appliance 2.1
  • Microsoft Windows XP
  • Microsoft Windows XP 64-bit Edition SP1
  • Microsoft Windows XP 64-bit Edition
  • Microsoft Windows XP 64-bit Edition Version 2003 SP1
  • Microsoft Windows XP 64-bit Edition Version 2003
  • Microsoft Windows XP Home SP1
  • Microsoft Windows XP Home SP2
  • Microsoft Windows XP Home
  • Microsoft Windows XP Media Center Edition SP1
  • Microsoft Windows XP Media Center Edition SP2
  • Microsoft Windows XP Media Center Edition
  • Microsoft Windows XP Professional SP1
  • Microsoft Windows XP Professional SP2
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Professional x64 Edition
  • Microsoft Windows XP Tablet PC Edition SP1
  • Microsoft Windows XP Tablet PC Edition SP2
  • Microsoft Windows XP Tablet PC Edition

References

  • BugTraq: 19922
  • CVE: CVE-2006-3442
  • CVE: CVE-2008-1440
  • CVE: CVE-2008-1441
  • URL: http://www.microsoft.com/technet/security/bulletin/MS06-052.mspx
  • URL: http://www.microsoft.com/technet/security/bulletin/MS08-036.mspx

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out