Signature Detail

HTTP: Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow

This signature detects attempts to exploit a known heap buffer overflow vulnerability in Microsoft Windows Fax Services. It is due to insufficient validation of a drawing object data while parsing Microsoft Fax cover page files. Remote attackers can exploit this by enticing the target user to open a specially crafted Fax cover page file. A successful attack can result in execution of arbitrary code within the security context of the currently logged in user. An unsuccessful attempt terminates the affected application abnormally.