HTTP: Office OCX Unsafe ActiveX Control

This signature detects attempts to exploit and known vulnerability in Office OCX. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Multiple Office OCX ActiveX controls are prone to a vulnerability that lets attackers execute arbitrary remote files. An attacker can exploit this issue to execute arbitrary code in the context of an application using the affected ActiveX control (typically Internet Explorer). This may aid in further attacks. The following ActiveX controls are vulnerable: Office Viewer OCX 3.0.1 Word Viewer OCX 3.2 PowerPoint Viewer OCX 3.1 Excel Viewer OCX 3.2

Affected Products

Office_ocx word_viewer_ocx

References

BugTraq: 33222 33243

CVE: CVE-2007-2495

URL: http://www.juniper.net/security/auto/vulnerabilities/vuln33222.html

Short Name

HTTP:STC:ACTIVEX:OFFICE-OCX

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Office OCX Unsafe ActiveX Control

Extended Description

Affected Products

References

Found a potential security threat?