HTTP: ADODB.Connection File Installation Weakness

This signature detects attempts to exploit a known vulnerability in the ADODB.Connection ActiveX Object of Microsoft Internet Explorer (IE). IE 6.0 and earlier are vulnerable. Attackers can trick users into downloading a malicious VBScript and executing the script locally. A successful attack can enable attackers to overwrite a file on the local host.

Extended Description

Successful exploitation enables an attacker to install Trojan horses or backdoor programs on the local filesystem, including the Startup folder, which could lead to complete compromise of the target host.

References

URL: http://www.securityfocus.com/archive/1/389023

Short Name

HTTP:STC:ACTIVEX:ADODB-CONNECT

Severity

Warning

Recommended

False

Recommended Action

None

HTTP: ADODB.Connection File Installation Weakness

Extended Description

References

Found a potential security threat?