Signature Detail

HTTP: Windows Movie Maker '.avi' File Remote Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Windows Movie Maker. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Windows Movie Maker is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Windows Movie Maker 2.1.4026 is vulnerable; other versions may also be affected.

Affected Products

• Microsoft Windows Movie Maker 2.1.4026

References

• BugTraq: 46835
• URL: http://www.microsoft.com