HTTP: Microsoft CAPICOM Certificates ActiveX

This signature detects attempts to exploit a known vulnerability in Microsoft CAPICOM. An attacker can create malicious Web pages containing dangerous JavaScript, which if accessed by a victim, can allow the attacker to execute code on the client.

Extended Description

The Microsoft CAPICOM ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page.

Affected Products

Microsoft capicom_activex_control

References

BugTraq: 23782

CVE: CVE-2007-0940

URL: http://msdn2.microsoft.com/en-us/library/aa388154.aspx

Short Name

HTTP:STC:ACTIVEX:CAPICOM

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft CAPICOM Certificates ActiveX

Extended Description

Affected Products

References

Found a potential security threat?