Intrusion PreventionSSL.PCT.Buffer.Overflow
Description
This indicates an attempt to exploit a Buffer Overflow vulnerability in the Microsoft Secure Sockets Layer(SSL) library.
The vulnerability is due to inadequate input validation in the Private Communications Transport(PCT) protocol implementation of the Microsoft Secure Sockets Layer(SSL) library. A remote attacker can execute arbitrary code on a target system via a specially crafted PCT 1.0 handshake packet.
Affected Products
Microsoft Windows NT 4.0 SP6a
Microsoft Windows 2000 SP2 through SP4
Microsoft Windows XP SP1
Microsoft Windows Server 2003
Microsoft NetMeeting
Microsoft Windows 98
Microsoft Windows ME
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the appropriate patches from Microsoft or upgrade the system to the latest non-vulnerable version.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-07-03 | 14.642 | Sig Added |
| ID | 29974 |
| Created | Nov 08, 2011 |
| Updated | Jul 02, 2019 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | Other |