Microsoft Windows Malware Protection Engine PDF File buffer overflow

VulDB: Microsoft Windows Malware Protection Engine PDF File buffer overflow

General

Microsoft

scipID: 2932
Affected: Microsoft Windows
Published: 02/13/2007 (Neel Mehta)
Risk: problematic
Entry: 98.7% complete
Created: 02/15/2007
Updated: 09/03/2012

Summary

A vulnerability has been found in Microsoft Windows and classified as problematic. This vulnerability affects an unknown function of the component Malware Protection Engine. The manipulation as part of a PDF File leads to a buffer overflow vulnerability. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was disclosed 02/13/2007 by Neel Mehta with ISS X-Force as MS07-010. The advisory is shared for download at microsoft.com. This vulnerability was named CVE-2006-5270 since 10/13/2006. The attack can be initiated remotely. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 24334, which helps to determine the existence of the flaw in a target environment. It is running in the context local and relying on port 139.

Applying the patch MS07-010 is able to eliminate this problem. The bugfix is ready for download at microsoft.com. A possible mitigation has been published immediately after the disclosure of the vulnerability. The vulnerability is also documented in the databases at OSVDB (31888), Secunia (SA24146), SecurityFocus (BID 22479) and SecurityTracker (ID 1017636).