MS.IE.JPEG.Rendering.Buffer.Overflow

Alias(es) Microsoft.IE.JPEG.Rendering.Buffer.Overflow.B, Microsoft.IE.JPEG.Rendering.Buffer.Overflow
Release Date Oct 19, 2006
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in Microsoft Internet Explorer. The vulnerability is caused by an error in the JPEG image rendering library when the vulnerable software handles a malicious JPEG file. It allows a remote attacker to execute arbitrary code via sending a crafted JPEG file.
Affected Products Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0
Recommended Actions Apply the patch available at the vendor's website: http://www.microsoft.com/technet/security/Bulletin/MS05-038.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2005-1988
Reference/s http://technet.microsoft.com/en-us/security/bulletin/ms05-038.mspx (MS-ID) http://www.securityfocus.com/bid/14282 (BugTraq) http://lcamtuf.coredump.cx/crash/

Fortinet