HTTP: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability

This signature detects attempts to exploit a known vulnerability against Macrovision FLEXnet. An attacker can create a malicious Web site containing dangerous Active X calls, which if accessed by a victim, can allow the attacker to gain control of the victim's client browser.

Extended Description

Macrovision FLEXNet ActiveX Control is prone to a buffer-overflow vulnerability. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.

Affected Products

Macrovision update_service

References

CVE: CVE-2007-2419

URL: http://www.securityfocus.com/archive/1/470585

Short Name

HTTP:STC:CLSID:ACTIVEX:MACRO-AX

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?