Signature Detail
Short Name |
HTTP:STC:IE:WSZ-EXEC |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
Internet Explorer/WinAmp .WSZ Plugin Attack |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Internet Explorer/WinAmp .WSZ Plugin Attack
This signature detects attempts to exploit vulnerabilities in Microsoft Internet Explorer and WinAmp. Attackers can trick users into viewing a maliciously crafted Web page that causes users to download and execute malicious code.
Extended Description
ICQ is an instant messenger client for Microsoft Windows systems. ICQ includes support for sound schemes. ICQ sound scheme files are generally given the .scm extension. Reportedly, it is possible for a remote party to modify sound settings in ICQ by forcing a vulnerable user to access a blank .scm file. Allegedly, this may be done if the user views maliciously formatted HTML under some browsers. The HTML must reference a sound scheme file within an IFRAME tag.
Affected Products
- Mirabilis ICQ 2002 a Build#3722
- Mirabilis ICQ 2002 a Build#3727
References