HTTP: Beyond Security beSTORM WinGraphviz.dll Unsafe ActiveX Control

This signature detects attempts to use unsafe ActiveX control against Beyond Security beSTORM. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

WinGraphviz is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will likely cause denial-of-service conditions. Note: This BID is being retired; the issue can not be exploited as described.

Affected Products

Wingraphviz wingraphviz

References

BugTraq: 54458

URL: http://www.beyondsecurity.com/

Short Name

HTTP:STC:ACTIVEX:BSTORM-WINGRPH

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Beyond Security beSTORM WinGraphviz.dll Unsafe ActiveX Control

Extended Description

Affected Products

References

Found a potential security threat?