Signature Detail
Short Name |
SMTP:DOS:MS-MALWARE-ENGINE |
|---|---|
Severity |
High |
Recommended |
No |
Category |
SMTP |
Keywords |
Microsoft Malware Protection Engine File Processing Denial of Service |
Release Date |
2011/12/21 |
Update Number |
2051 |
Supported Platforms |
idp-4.0.110090709+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: Microsoft Malware Protection Engine File Processing Denial of Service
This signature detects attempts to exploit a known vulnerability against Microsoft Malware Protection Engine. A successful attack can result in a denial-of-service condition.
Extended Description
Microsoft Malware Protection Engine is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input when parsing specially crafted files. Attackers can exploit this issue to cause an affected computer to stop responding or to restart. Successful attacks will deny service to legitimate users.
Affected Products
- Microsoft Antigen for Exchange 9
- Microsoft Antigen for SMTP Gateway 9
- Microsoft Forefront Client Security
- Microsoft Forefront Security for Exchange Server 1.0
- Microsoft Forefront Security for SharePoint Server 1.0
- Microsoft Standalone System Sweeper
- Microsoft Windows Defender
- Microsoft Windows Defender x64 Edition
- Microsoft Windows Live OneCare
References
- BugTraq: 29060
- CVE: CVE-2008-1437