Signature Detail

HTTP: XnView mbm File Parsing Buffer Overflow1

This signature detects attempts to exploit a known vulnerability in XnView. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the targeted application. Failed exploit attempts could result in a denial of service condition.

References

• URL: http://www.securelist.com/en/analysis/204792247/miniFlame_aka_SPE_Elvis_and_his_friends
• URL: http://vrt-blog.snort.org/2012/12/triggering-miniflames-c-communication.html