Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:DLL-REQ-VIA-WEBDAV |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
DLL File Download via WebDAV |
Release Date |
2010/09/08 |
Update Number |
1768 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: DLL File Download via WebDAV
This signature detects Microsoft Windows Dynamically Link Libraries (DLL's) transferred via WebDAV. Vulnerabilities in Microsoft Windows allow an attacker to reference a malicious remote DLL file through a Web page, which when the page is accessed, overwrites a local DLL, resulting in arbitrary code execution.
Extended Description
Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Media Center. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application.
Affected Products
- Microsoft windows_7_for_32-bit_systems SP1
- Microsoft windows_7_for_32-bit_systems
- Microsoft windows_7_for_x64-based_systems SP1
- Microsoft windows_7_for_x64-based_systems
- Microsoft windows_media_center_tv_pack_for_windows_vista_32-bit_edition
- Microsoft windows_media_center_tv_pack_for_windows_vista_64-bit_edition
- Microsoft windows_vista Business SP1
- Microsoft windows_vista Business SP2
- Microsoft windows_vista Enterprise SP1
- Microsoft windows_vista Enterprise SP2
- Microsoft windows_vista Home Basic SP1
- Microsoft windows_vista Home Basic SP2
- Microsoft windows_vista Home Premium SP1
- Microsoft windows_vista Home Premium SP2
- Microsoft windows_vista SP1
- Microsoft windows_vista SP2
- Microsoft windows_vista Ultimate SP1
- Microsoft windows_vista Ultimate SP2
- Microsoft windows_vista_x64_edition SP1
- Microsoft windows_vista_x64_edition SP2
- Microsoft windows_vista_x64_edition
References
- BugTraq: 53011
- BugTraq: 42634
- BugTraq: 52036
- BugTraq: 42654
- BugTraq: 42648
- BugTraq: 42763
- BugTraq: 42811
- BugTraq: 42681
- BugTraq: 42628
- BugTraq: 49943
- BugTraq: 62836
- BugTraq: 42541
- CVE: CVE-2011-1980
- CVE: CVE-2011-2016
- CVE: CVE-2011-2019
- CVE: CVE-2010-3138
- CVE: CVE-2012-0756
- CVE: CVE-2012-0016
- CVE: CVE-2012-1241
- CVE: CVE-2012-1849
- CVE: CVE-2012-1854
- CVE: CVE-2010-3145
- CVE: CVE-2010-3148
- CVE: CVE-2011-3396
- CVE: CVE-2014-1756
- CVE: CVE-2010-3146
- CVE: CVE-2010-3966
- CVE: CVE-2013-3485
- CVE: CVE-2013-0742
- CVE: CVE-2010-3190
- CVE: CVE-2012-0008
- CVE: CVE-2010-3131
- CVE: CVE-2010-3337
- CVE: CVE-2011-1247
- CVE: CVE-2011-2009
- CVE: CVE-2010-3147
- CVE: CVE-2010-5082
- CVE: CVE-2010-3965
- CVE: CVE-2010-1795
- CVE: CVE-2012-2519
- CVE: CVE-2013-0733
- CVE: CVE-2010-3143
- CVE: CVE-2010-3144
- CVE: CVE-2011-0029
- CVE: CVE-2011-0032
- CVE: CVE-2011-0107
- CVE: CVE-2011-1975
- CVE: CVE-2014-8393
- CVE: CVE-2011-2980
- CVE: CVE-2015-1758
- URL: http://www.acrossecurity.com/aspr/ASPR-2010-08-18-1-PUB.txt
- URL: http://blog.zoller.lu/2010/08/cve-2010-xn-loadlibrarygetprocaddress.html
- URL: https://www.microsoft.com/technet/security/advisory/2269637.mspx