Microsoft Windows Media Services 'nskey.dll' ActiveX Control Remote Buffer Overflow

Publish date: February 25, 2011
  Severity: CRITICAL
  CVE Identifier: CVE-2008-5232
  Advisory Date: FEB 25, 2011

  DESCRIPTION

The Microsoft Windows Media Services ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of an application using the affected ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions. Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1002863
  Trend Micro Deep Security DPI Rule Name: 1002863 - Microsoft Windows Media Services 'nskey.dll' ActiveX Control Remote Buffer Overflow

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Windows NT
  • Microsoft Windows 2000

Featured Stories