HTTP: AOL Radio AmpX Buffer Overflow

This signature detects attempts to exploit a known vulnerability in AOL Rado AmpX ActiveX Control. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

AOL Radio AmpX ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Invoking the object from a malicious website or HTML email may trigger the condition. A successful attack would corrupt process memory, allowing arbitrary code to run in the context of the client application using the affected ActiveX control. 'AmpX.dll' 2.6.1.11 is vulnerable; prior versions may also be affected.

Affected Products

Aol ampx.dll

References

BugTraq: 26396 35028

CVE: CVE-2007-5755

Short Name

HTTP:STC:ACTIVEX:AOL-AMPX

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: AOL Radio AmpX Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?