HTTP: Microsoft XML Core Service XMLHTTP ActiveX Control

This signature detects attempts to use unsafe ActiveX controls in Microsoft XML Core Service. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Microsoft XML Core Service is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the affected application, facilitating the remote compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Avaya s8100_media_servers,Microsoft xml_core_services

References

BugTraq: 39489 20915

CVE: CVE-2009-4596

URL: http://www.kb.cert.org/vuls/id/585137

Short Name

HTTP:STC:ACTIVEX:XMLHTTP

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Microsoft XML Core Service XMLHTTP ActiveX Control

Extended Description

Affected Products

References

Found a potential security threat?