HTTP: Gesytec GmbH ElonFmt ActiveX
This signature detects attempts to use unsafe ActiveX controls in Gesytec GmbH ElonFmt. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
Gesytec GmbH ElonFmt ActiveX control 'ElonFmt.ocx' is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts likely result in denial-of-service conditions. ElonFmt ActiveX 1.1.14 is affected; other versions may also be vulnerable.
Affected Products
Gesytec_gmbh elonfmt_activex
Short Name
HTTP:STC:ACTIVEX:GESTEC-ELONFMT
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
ActiveX ElonFmt Gesytec GmbH bid:47533
Release Date
04/25/2011
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Gesytec_gmbh