HTTP: Flexera InstallShield ISGrid2.dll DoFindReplace Heap Buffer Overflow

This signature detects attempts to use unsafe ActiveX controls in the Flexera Software InstallShield Component. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Novell ZENworks Configuration Management is prone to multiple remote code-execution vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts likely result in denial-of-service conditions.

Affected Products

Novell zenworks_configuration_management

References

CVE: CVE-2011-3174

Short Name

HTTP:STC:ACTIVEX:FLEXERA

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Flexera InstallShield ISGrid2.dll DoFindReplace Heap Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?