Intrusion Prevention

MS.Windows.AVI.File.DoS

Description

This indicates an attack attempt against a denial-of-service in Microsoft Windows Explorer.
This vulnerability is due to an error when the vulnerable software handles a malformed AVI file. A remote attacker may exploit this to cause the explorer.exe process to crash by persuading a victim to right-click on a specially crafted AVI file.

Affected Products

Windows Explorer 6.0.2900.2180

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Refer to the vendor's website for the suggested workaround:
http://www.microsoft.com

CVE References

CVE-2007-0562