Signature Detail
Short Name |
HTTP:DLL-REQ-VIA-WEBDAV |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
DLL File Download via WebDAV |
Release Date |
2010/09/08 |
Update Number |
1768 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: DLL File Download via WebDAV
This signature detects Microsoft Windows Dynamically Link Libraries (DLL's) transferred via WebDAV. Vulnerabilities in Microsoft Windows allow an attacker to reference a malicious remote DLL file through a Web page, which when the page is accessed, overwrites a local DLL, resulting in arbitrary code execution.
Extended Description
Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Media Center. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application.
Affected Products
- Microsoft Windows 7 for 32-bit Systems SP1
- Microsoft Windows 7 for 32-bit Systems
- Microsoft Windows 7 for x64-based Systems SP1
- Microsoft Windows 7 for x64-based Systems
- Microsoft Windows Media Center TV Pack for Windows Vista 32-bit edition
- Microsoft Windows Media Center TV Pack for Windows Vista 64-bit edition
- Microsoft Windows Vista Business SP1
- Microsoft Windows Vista Business SP2
- Microsoft Windows Vista Enterprise SP1
- Microsoft Windows Vista Enterprise SP2
- Microsoft Windows Vista Home Basic SP1
- Microsoft Windows Vista Home Basic SP2
- Microsoft Windows Vista Home Premium SP1
- Microsoft Windows Vista Home Premium SP2
- Microsoft Windows Vista SP1
- Microsoft Windows Vista SP2
- Microsoft Windows Vista Ultimate SP1
- Microsoft Windows Vista Ultimate SP2
- Microsoft Windows Vista x64 Edition SP1
- Microsoft Windows Vista x64 Edition SP2
- Microsoft Windows Vista x64 Edition
References
- BugTraq: 42648
- BugTraq: 42634
- BugTraq: 62836
- BugTraq: 42654
- BugTraq: 42628
- BugTraq: 49943
- BugTraq: 52036
- BugTraq: 53011
- BugTraq: 42763
- BugTraq: 42811
- BugTraq: 42681
- BugTraq: 42541
- CVE: CVE-2011-1975
- CVE: CVE-2013-3485
- CVE: CVE-2010-3145
- CVE: CVE-2013-0733
- CVE: CVE-2013-0742
- CVE: CVE-2011-0107
- CVE: CVE-2010-3143
- CVE: CVE-2010-3144
- CVE: CVE-2010-3131
- CVE: CVE-2010-3337
- CVE: CVE-2010-1795
- CVE: CVE-2010-3190
- CVE: CVE-2011-2009
- CVE: CVE-2011-1247
- CVE: CVE-2012-2519
- CVE: CVE-2011-1980
- CVE: CVE-2011-2016
- CVE: CVE-2011-2019
- CVE: CVE-2011-3396
- CVE: CVE-2010-3138
- CVE: CVE-2010-5082
- CVE: CVE-2012-0756
- CVE: CVE-2010-3148
- CVE: CVE-2012-0008
- CVE: CVE-2012-0016
- CVE: CVE-2012-1241
- CVE: CVE-2012-1849
- CVE: CVE-2012-1854
- CVE: CVE-2011-2980
- CVE: CVE-2010-3147
- CVE: CVE-2014-1756
- CVE: CVE-2014-8393
- CVE: CVE-2010-3965
- CVE: CVE-2010-3966
- CVE: CVE-2011-0032
- CVE: CVE-2010-3146
- CVE: CVE-2011-0029
- URL: https://www.microsoft.com/technet/security/advisory/2269637.mspx
- URL: http://blog.zoller.lu/2010/08/cve-2010-xn-loadlibrarygetprocaddress.html
- URL: http://www.acrossecurity.com/aspr/ASPR-2010-08-18-1-PUB.txt