HTTP: Vulnerable DHTML ActiveX Control

This signature detects attempts to use unsafe ActiveX controls in Microsoft DHMTL. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser. This technique is frequently used in the wild to bypass the blocking of popup ads.

Extended Description

The Microsoft DHTML Editing Component ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application that uses the ActiveX control (typically Internet Explorer).

Affected Products

Avaya messaging_application_server,Microsoft windows_2000_server

References

BugTraq: 11950 36280

CVE: CVE-1999-0487

Short Name

HTTP:STC:ACTIVEX:VULN-DHTML

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Vulnerable DHTML ActiveX Control

Extended Description

Affected Products

References

Found a potential security threat?