MS.Fax.Cover.Page.Editor.Text.Element.Memory.Corruption

Description

This indicates an attempt to exploit a double-free vulnerability in Microsoft Windows Fax Cover Page Editor.
The vulnerability is caused by an error when the vulnerable software parses a COV file with malformed "Text" elements. It may allow remote attackers to execute arbitrary code by sending a crafted COV file.

Affected Products

Microsoft Fax Cover Page Editor 5.2.3790.3959 and earlier.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Refer to the vendor's web site for suggested work around.
http://www.microsoft.com/technet/security/Bulletin/ms11-024.mspx

References