CODEWITHSUNDEEP
offsetimagingmalformed
Simnad K N
Simnad K N

Reputation: 1

Is it a false security alert?

I'm getting this alert:

Microsoft Kodak Imaging small offset malformed tiff-small endian

I scanned the affected system with an antivirus: no infection found. Is this a false IPS alert ?

Upvotes: 0

Views: 131

Answers (1)

BonzoFestoon
BonzoFestoon

Reputation: 331

Assume that the alert is true. The only way to know for sure is to submit the file to the maker of the software giving the alert and ask them to verify.

Here an explanation of that alert:

Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif (TIFF) file.

https://www.snort.org/rule_docs/1-34135

Upvotes: 0

Related Questions