Signature Detail
Short Name |
HTTP:STC:DL:MS-FON-FILE-RCE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Windows Bitmap Fonts Remote Code Execution |
Release Date |
2011/10/10 |
Update Number |
2008 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Windows Bitmap Fonts Remote Code Execution
This signature detects attempts to exploit a known flaw in Microsoft Bitmap Fonts. An attack can entice a user to load a malicious .fon file which can result in arbitrary code execution in the victim's machine.
Extended Description
Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a malformed file on a remote network share. Successful exploits can allow attackers to execute arbitrary code with kernel-level privileges. Failed exploit attempts will result in a denial-of-service condition.
Affected Products
- Avaya Aura Conferencing 6.0 Standard
- Avaya CallPilot 4.0
- Avaya CallPilot 5.0
- Avaya Communication Server 1000 Telephony Manager 3.0
- Avaya Communication Server 1000 Telephony Manager 4.0
- Avaya Meeting Exchange 5.0
- Avaya Meeting Exchange 5.0.0.0.52
- Avaya Meeting Exchange 5.0 SP1
- Avaya Meeting Exchange 5.0 SP2
- Avaya Meeting Exchange 5.1
- Avaya Meeting Exchange 5.1 SP1
- Avaya Meeting Exchange 5.2
- Avaya Meeting Exchange 5.2 SP1
- Avaya Meeting Exchange 5.2 SP2
- Avaya Meeting Exchange - Client Registration Server
- Avaya Meeting Exchange - Recording Server
- Avaya Meeting Exchange - Web Conferencing Server
- Avaya Meeting Exchange - Webportal
- Avaya Messaging Application Server 4
- Avaya Messaging Application Server 5
- Avaya Messaging Application Server 5.2
- Microsoft Windows 7 RC
- Microsoft Windows 7 for 32-bit Systems SP1
- Microsoft Windows 7 for 32-bit Systems
- Microsoft Windows 7 for x64-based Systems SP1
- Microsoft Windows 7 for x64-based Systems
- Microsoft Windows 7 Home Premium - Sp1 X32
- Microsoft Windows 7 Home Premium - Sp1 X64
- Microsoft Windows 7 Home Premium
- Microsoft Windows 7 Professional
- Microsoft Windows 7 Starter
- Microsoft Windows 7 Ultimate
- Microsoft Windows 7 XP Mode
- Microsoft Windows Server 2008 R2
- Microsoft Windows Server 2003 Gold
- Microsoft Windows Server 2003 Gold Compute Cluster
- Microsoft Windows Server 2003 Gold Datacenter
- Microsoft Windows Server 2003 Gold Enterprise
- Microsoft Windows Server 2003 Gold Itanium
- Microsoft Windows Server 2003 Gold Standard
- Microsoft Windows Server 2003 Gold Storage
- Microsoft Windows Server 2003 Gold X64
- Microsoft Windows Server 2003 Gold X64-Datacenter
- Microsoft Windows Server 2003 Gold X64-Enterprise
- Microsoft Windows Server 2003 Gold X64-Standard
- Microsoft Windows Server 2003 SP1
- Microsoft Windows Server 2003 Sp1 Compute Cluster
- Microsoft Windows Server 2003 SP1 Platform SDK
- Microsoft Windows Server 2003 Sp1 Storage
- Microsoft Windows Server 2003 Sp1 X64
- Microsoft Windows Server 2003 SP2
- Microsoft Windows Server 2003 Sp2 Compute Cluster
- Microsoft Windows Server 2003 Sp2 Datacenter
- Microsoft Windows Server 2003 Sp2 Enterprise
- Microsoft Windows Server 2003 Sp2 Storage
- Microsoft Windows Server 2003 Sp2 X64
- Microsoft Windows Server 2003 Datacenter Edition SP1
- Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1
- Microsoft Windows Server 2003 Datacenter Edition
- Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
- Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1
- Microsoft Windows Server 2003 Datacenter Edition Itanium
- Microsoft Windows Server 2003 Datacenter x64 Edition SP2
- Microsoft Windows Server 2003 Datacenter x64 Edition
- Microsoft Windows Server 2003 Enterprise Edition SP1
- Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1
- Microsoft Windows Server 2003 Enterprise Edition
- Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
- Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1
- Microsoft Windows Server 2003 Enterprise Edition Itanium SP2
- Microsoft Windows Server 2003 Enterprise Edition Itanium Sp2 Itanium
- Microsoft Windows Server 2003 Enterprise Edition Itanium
- Microsoft Windows Server 2003 Enterprise x64 Edition SP2
- Microsoft Windows Server 2003 Enterprise x64 Edition
- Microsoft Windows Server 2003 Itanium SP1
- Microsoft Windows Server 2003 Itanium SP2
- Microsoft Windows Server 2003 Itanium
- Microsoft Windows Server 2003 Standard Edition SP1
- Microsoft Windows Server 2003 Standard Edition SP1 Beta 1
- Microsoft Windows Server 2003 Standard Edition SP2
- Microsoft Windows Server 2003 Standard Edition
- Microsoft Windows Server 2003 Standard x64 Edition
- Microsoft Windows Server 2003 Terminal Services
- Microsoft Windows Server 2003 Web Edition SP1
- Microsoft Windows Server 2003 Web Edition SP1 Beta 1
- Microsoft Windows Server 2003 Web Edition SP2
- Microsoft Windows Server 2003 Web Edition
- Microsoft Windows Server 2003 x64 SP1
- Microsoft Windows Server 2003 x64 SP2
- Microsoft Windows Server 2008 SP2 Beta
- Microsoft Windows Server 2008 - Sp2 Enterprise X64
- Microsoft Windows Server 2008 Datacenter Edition Release Candidate
- Microsoft Windows Server 2008 Datacenter Edition SP2
- Microsoft Windows Server 2008 Datacenter Edition
- Microsoft Windows Server 2008 Enterprise Edition Release Candidate
- Microsoft Windows Server 2008 Enterprise Edition SP2
- Microsoft Windows Server 2008 Enterprise Edition
- Microsoft Windows Server 2008 for 32-bit Systems SP2
- Microsoft Windows Server 2008 for 32-bit Systems
- Microsoft Windows Server 2008 for Itanium-based Systems R2
- Microsoft Windows Server 2008 for Itanium-based Systems SP2
- Microsoft Windows Server 2008 for Itanium-based Systems
- Microsoft Windows Server 2008 for x64-based Systems R2
- Microsoft Windows Server 2008 for x64-based Systems SP2
- Microsoft Windows Server 2008 for x64-based Systems
- Microsoft Windows Server 2008 R2 Datacenter SP1
- Microsoft Windows Server 2008 R2 Datacenter
- Microsoft Windows Server 2008 R2 Enterprise Edition
- Microsoft Windows Server 2008 R2 for x64-based Systems SP1
- Microsoft Windows Server 2008 R2 Itanium SP1
- Microsoft Windows Server 2008 R2 Itanium
- Microsoft Windows Server 2008 R2 Standard Edition
- Microsoft Windows Server 2008 R2 x64 SP1
- Microsoft Windows Server 2008 R2 x64
- Microsoft Windows Server 2008 Standard Edition - Gold
- Microsoft Windows Server 2008 Standard Edition - Gold Datacenter
- Microsoft Windows Server 2008 Standard Edition - Gold Enterprise
- Microsoft Windows Server 2008 Standard Edition - Gold Hpc
- Microsoft Windows Server 2008 Standard Edition - Gold Itanium
- Microsoft Windows Server 2008 Standard Edition - Gold Standard
- Microsoft Windows Server 2008 Standard Edition - Gold Storage
- Microsoft Windows Server 2008 Standard Edition - Gold Web
- Microsoft Windows Server 2008 Standard Edition Itanium
- Microsoft Windows Server 2008 Standard Edition R2
- Microsoft Windows Server 2008 Standard Edition R2 SP1
- Microsoft Windows Server 2008 Standard Edition Release Candidate
- Microsoft Windows Server 2008 Standard Edition SP2
- Microsoft Windows Server 2008 Standard Edition - Sp2 Hpc
- Microsoft Windows Server 2008 Standard Edition - Sp2 Storage
- Microsoft Windows Server 2008 Standard Edition - Sp2 Web
- Microsoft Windows Server 2008 Standard Edition X64
- Microsoft Windows Server 2008 Standard Edition
- Microsoft Windows Vista 1.0
- Microsoft Windows Vista 2.0
- Microsoft Windows Vista 3.0
- Microsoft Windows Vista Beta
- Microsoft Windows Vista Beta 1
- Microsoft Windows Vista Beta 2
- Microsoft Windows Vista Business
- Microsoft Windows Vista Business SP1
- Microsoft Windows Vista Business SP2
- Microsoft Windows Vista Enterprise
- Microsoft Windows Vista Enterprise SP1
- Microsoft Windows Vista Enterprise SP2
- Microsoft Windows Vista Home Basic
- Microsoft Windows Vista Home Basic SP1
- Microsoft Windows Vista Home Basic SP2
- Microsoft Windows Vista Home Premium
- Microsoft Windows Vista Home Premium SP1
- Microsoft Windows Vista Home Premium SP2
- Microsoft Windows Vista SP1
- Microsoft Windows Vista SP2
- Microsoft Windows Vista SP2 Beta
- Microsoft Windows Vista Ultimate
- Microsoft Windows Vista Ultimate SP1
- Microsoft Windows Vista Ultimate SP2
- Microsoft Windows Vista
- Microsoft Windows Vista Business 64-bit edition SP1
- Microsoft Windows Vista Business 64-bit edition Sp1 X64-Enterprise
- Microsoft Windows Vista Business 64-bit edition Sp1 X64-Home Premium
- Microsoft Windows Vista Business 64-bit edition Sp1 X64-Ultimate
- Microsoft Windows Vista Business 64-bit edition SP2
- Microsoft Windows Vista Business 64-bit edition X64-Enterprise
- Microsoft Windows Vista Business 64-bit edition X64-Ultimate
- Microsoft Windows Vista Business 64-bit edition
- Microsoft Windows Vista December CTP Gold
- Microsoft Windows Vista December CTP SP1
- Microsoft Windows Vista December CTP SP2
- Microsoft Windows Vista December CTP X64
- Microsoft Windows Vista December CTP
- Microsoft Windows Vista Enterprise 64-bit edition SP1
- Microsoft Windows Vista Enterprise 64-bit edition SP2
- Microsoft Windows Vista Enterprise 64-bit edition
- Microsoft Windows Vista Home Basic 64-bit edition SP1
- Microsoft Windows Vista Home Basic 64-bit edition Sp1 X64
- Microsoft Windows Vista Home Basic 64-bit edition SP2
- Microsoft Windows Vista Home Basic 64-bit edition Sp2 X64
- Microsoft Windows Vista Home Basic 64-bit edition
- Microsoft Windows Vista Home Premium 64-bit edition SP1
- Microsoft Windows Vista Home Premium 64-bit edition SP2
- Microsoft Windows Vista Home Premium 64-bit edition
- Microsoft Windows Vista Ultimate 64-bit edition SP1
- Microsoft Windows Vista Ultimate 64-bit edition SP2
- Microsoft Windows Vista Ultimate 64-bit edition
- Microsoft Windows Vista x64 Edition SP1
- Microsoft Windows Vista x64 Edition SP2
- Microsoft Windows Vista x64 Edition
- Microsoft Windows XP - Gold 64-Bit-2002
- Microsoft Windows XP Gold Embedded
- Microsoft Windows XP - Gold Home
- Microsoft Windows XP Gold Media Center
- Microsoft Windows XP Gold Professional
- Microsoft Windows XP Gold Tablet Pc
- Microsoft Windows XP - Gold X64
- Microsoft Windows XP - Sp1 X64
- Microsoft Windows XP
- Microsoft Windows XP
- Microsoft Windows XP 64-bit Edition SP1
- Microsoft Windows XP 64-bit Edition
- Microsoft Windows XP 64-bit Edition Version 2003 SP1
- Microsoft Windows XP 64-bit Edition Version 2003
- Microsoft Windows XP Embedded SP1
- Microsoft Windows XP Embedded SP2
- Microsoft Windows XP Embedded SP3
- Microsoft Windows XP Embedded
- Microsoft Windows XP Gold
- Microsoft Windows XP Home SP1
- Microsoft Windows XP Home SP2
- Microsoft Windows XP Home SP3
- Microsoft Windows XP Home
- Microsoft Windows XP Media Center Edition SP1
- Microsoft Windows XP Media Center Edition SP2
- Microsoft Windows XP Media Center Edition SP3
- Microsoft Windows XP Media Center Edition
- Microsoft Windows XP Media Center Edition 2005 SP3
- Microsoft Windows XP Professional SP1
- Microsoft Windows XP Professional SP2
- Microsoft Windows XP Professional SP3
- Microsoft Windows XP Professional
- Microsoft Windows XP Professional x64 Edition SP2
- Microsoft Windows XP Professional x64 Edition
- Microsoft Windows XP Service Pack 3
- Microsoft Windows XP Tablet PC Edition SP1
- Microsoft Windows XP Tablet PC Edition SP2
- Microsoft Windows XP Tablet PC Edition SP3
- Microsoft Windows XP Tablet PC Edition
References
- BugTraq: 49975
- CVE: CVE-2011-2003