HTTP: JView Profiler Unsafe ActiveX Control - 2

This signature detects attempts to exploit a known vulnerability against Internet Explorer. The attacker can create a malicious Web site containing dangerous ActiveX CLSID references, which if accessed by a victim, allows the attacker to gain control of victim's client browser.

Extended Description

Microsoft Internet Explorer is prone to a heap-based buffer-overflow vulnerability that occurs when the 'javaprxy.dll' COM object is instantiated by a malicious webpage. Attackers may exploit this issue to execute arbitrary code in the context of the client.

Affected Products

Microsoft internet_explorer

References

BugTraq: 14087 14511

CVE: CVE-2005-2087

URL: http://www.sec-consult.com/184.html

Short Name

HTTP:STC:ACTIVEX:JVIEWPRO-2

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: JView Profiler Unsafe ActiveX Control - 2

Extended Description

Affected Products

References

Found a potential security threat?