SID 1:47534

Rule Category

FILE-MULTIMEDIA -- Snort detected traffic targeting vulnerabilities in multimedia files (mp3, movies, wmv, etc.).

Alert Message

FILE-MULTIMEDIA Adobe Flash Player malformed MP4-AVC out-of-bounds read attempt

Rule Explanation

This event is generated when an attempt to exploit a vulnerability in Adobe Flash Player, using a malicious MP4 file, is detected. Impact: High Details: This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of MP4-Advanced Video Coding (AVC) processing. A malformed AVC stream within MP4 input leads to flawed computation that involves pointer offset arithmetic which does not adequately account for the buffer boundaries Ease of Attack: Simple

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group