This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
HTTP:DLL-REQ-VIA-WEBDAV
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
HTTP
|
Keywords |
DLL File Download via WebDAV
|
Release Date |
2010/09/08
|
Update Number |
1768
|
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
HTTP: DLL File Download via WebDAV
This signature detects Microsoft Windows Dynamically Link Libraries (DLL's) transferred via WebDAV. Vulnerabilities in Microsoft Windows allow an attacker to reference a malicious remote DLL file through a Web page, which when the page is accessed, overwrites a local DLL, resulting in arbitrary code execution.
Extended Description
Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Media Center.
Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application.
Affected Products
- Microsoft windows_7_for_32-bit_systems SP1
- Microsoft windows_7_for_32-bit_systems
- Microsoft windows_7_for_x64-based_systems SP1
- Microsoft windows_7_for_x64-based_systems
- Microsoft windows_media_center_tv_pack_for_windows_vista_32-bit_edition
- Microsoft windows_media_center_tv_pack_for_windows_vista_64-bit_edition
- Microsoft windows_vista Business SP1
- Microsoft windows_vista Business SP2
- Microsoft windows_vista Enterprise SP1
- Microsoft windows_vista Enterprise SP2
- Microsoft windows_vista Home Basic SP1
- Microsoft windows_vista Home Basic SP2
- Microsoft windows_vista Home Premium SP1
- Microsoft windows_vista Home Premium SP2
- Microsoft windows_vista SP1
- Microsoft windows_vista SP2
- Microsoft windows_vista Ultimate SP1
- Microsoft windows_vista Ultimate SP2
- Microsoft windows_vista_x64_edition SP1
- Microsoft windows_vista_x64_edition SP2
- Microsoft windows_vista_x64_edition
References