Software Engineering Institute

Microsoft Malware Protection Engine contains a vulnerability that could be exploited when it attempts to process specially crafted PDF files. According to Microsoft Security Bulletin MS07-010, an integer overflow vulnerability exists in the way that the Microsoft Malware Protection Engine processes Portable Document Format (PDF) files. An attacker with the ability to supply a specially crafted PDF file could exploit this vulnerability.

Note that according to Microsoft the Malware Protection Engine is a coponent of the following:

• Windows Live OneCare
• Microsoft Antigen for Exchange 9.x
• Microsoft Antigen for SMTP Gateway 9.x
• Microsoft Windows Defender
• Microsoft Windows Defender x64 Edition
• Microsoft Windows Defender in Windows Vista
• Microsoft Forefront Security for Exchange Server
• Microsoft Forefront Security for SharePoint

A remote, unauthenticated attacker may be able to execute arbitrary code or cause a denial-of-service condition.

UpdateMicrosoft has released an update to address this issue. See Microsoft Security Bulletin MS07-010 for more details.