HTTP: Microsoft Internet Explorer URLMON.DLL Dangerous ActiveX Object

This signature detects attempts to exploit a known vulnerability in Internet Explorer (IE). An attacker can create a malicious Web page containing dangerous ActiveX CLSID references, which if accessed by a victim, can allow the attacker to gain control of the victim's client browsers

Extended Description

Microsoft Internet Explorer is prone to remote code-execution vulnerability. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application.

Affected Products

Avaya messaging_application_server,Microsoft internet_explorer

References

BugTraq: 24372

CVE: CVE-2007-0218

URL: http://www.microsoft.com/technet/security/Bulletin/MS07-033.mspx

Short Name

HTTP:STC:ACTIVEX:URLMON-DLL

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Internet Explorer URLMON.DLL Dangerous ActiveX Object

Extended Description

Affected Products

References

Found a potential security threat?