Signature Detail
Short Name |
HTTP:STC:IMG:OFFICE-FLASHPIX |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Office Malicious FlashPix Graphics File |
Release Date |
2010/12/13 |
Update Number |
1832 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Office Malicious FlashPix Graphics File
This signature detects attempts to exploit a known vulnerability against the Microsoft Office FlashPix Graphics Filter. A successful attack can lead to arbitrary code execution.
Extended Description
Microsoft Office is prone to multiple remote buffer-overflow vulnerabilities because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues by enticing an unsuspecting user into opening an Office document containing a specially crafted FlashPix image. Successfully exploiting these issues allows attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.
Affected Products
- Microsoft Office Converter Pack
- Microsoft Office XP SP1
- Microsoft Office XP SP2
- Microsoft Office XP SP3
- Microsoft Office XP
References
- BugTraq: 45283
- CVE: CVE-2010-3952