HTTP: Microsoft Windows Common Control 'MSCOMCTL.OCX' Unsafe ActiveX Control

This signature detects attempts to exploit a known flaw in the Microsoft Windows Common ActiveX control. An attacker could exploit the vulnerability by constructing a specially crafted Web page or sending a malicious RTF document. Visiting the website with a vulnerable version of Internet Explorer, or opening the RTF document with Office or Wordpad could result in arbitrary code execution.

Extended Description

Microsoft Windows Common Controls is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control.

Affected Products

Microsoft visual_basic

References

BugTraq: 52911

CVE: CVE-2012-0158

URL: http://contagiodump.blogspot.com.es/2012/04/cve2012-0158-south-china-sea-insider.html

Short Name

HTTP:STC:ACTIVEX:MSCOMCTL-OCX

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows Common Control 'MSCOMCTL.OCX' Unsafe ActiveX Control

Extended Description

Affected Products

References

Found a potential security threat?