HTTP: Microsoft Office MSODataSourceControl ActiveX Control Denial of Service
This signature detects attempts to exploit a known vulnerability in Microsoft Office. Attackers can create malicious Web pages containing dangerous ActiveX controls, which if accessed by a victim, can allow an attacker to gain control of the victim's client browser.
Extended Description
Microsoft Office MSODataSourceControl ActiveX Control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.
Affected Products
Microsoft office_2003
Short Name
HTTP:STC:ACTIVEX:MSO-DATASRC
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
ActiveX CVE-2007-3282 Control Denial MSODataSourceControl Microsoft Office Service bid:24462 of
Release Date
06/20/2007
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3724
False Positive
Unknown
Vendors
Microsoft
CVSS Score
7.8