HTTP: Microsoft Visual FoxPro ActiveX Vulnerability

This signature detects attempts to exploit a known vulnerability in Microsoft Visual FoxPro. Attackers can create malicious Web pages containing dangerous ActiveX calls, which if accessed by a victim, can allow the attacker to gain control of the target system.

Extended Description

Microsoft Visual FoxPro ActiveX control is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions. Microsoft Visual FoxPro 6.0 is vulnerable to this issue; other versions may also be affected.

Affected Products

Nortel_networks contact_center_manager_server

References

BugTraq: 25571

CVE: CVE-2007-4790

URL: http://www.sans.org/newsletters/risk/display.php?v=7&i=37&rss=Y#widely4 http://www.microsoft.com/technet/security/bulletin/MS07-010.mspx http://www.milw0rm.com/exploits/4369

Short Name

HTTP:STC:CLSID:ACTIVEX:FPOLE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Visual FoxPro ActiveX Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?