HTTP: Gateway CWebLaunchCtl ActiveX Control Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Gateway CWebLaunchCtl ActiveX Control. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Gateway CWebLaunchCtl ActiveX control is prone to an arbitrary-command-execution vulnerability and a buffer-overflow vulnerability. An attacker can exploit these issues to execute arbitrary local scripts and to execute remote code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions. These issues affect weblaunch.ocx 1.0.0.1 and weblaunch2.ocx, which provide the ActiveX control; other versions may also be affected.

Affected Products

Gateway weblaunch2.ocx_cweblaunchctl_activex_control

References

BugTraq: 27193

URL: http://www.securityfocus.com/advisories/13740

Short Name

HTTP:STC:ACTIVEX:GATEWAYX

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Gateway CWebLaunchCtl ActiveX Control Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?