HTTP: Microsoft Visual Studio VBTOVSI.DLL ActiveX Vulnerability

This signature detects attempts to exploit a known vulnerability in Microsoft Visual Studio 6.0. Attackers can create malicious Web pages containing dangerous ActiveX calls, which if accessed by a victim, can allow the attacker to gain control of the target system.

Extended Description

Microsoft Visual Studio VB To VSI Support Library ActiveX Control is prone to a vulnerability that lets attackers overwrite arbitrary files. An attacker can exploit this issue to overwrite arbitrary files with local data. This will likely result in denial-of-service conditions; other attacks may also be possible.

Affected Products

Microsoft vb_to_vsi_support_library

References

BugTraq: 25635

CVE: CVE-2007-4890

URL: http://www.securityfocus.com/bid/25635 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-4890

Short Name

HTTP:STC:CLSID:ACTIVEX:VBTOVSI

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Visual Studio VBTOVSI.DLL ActiveX Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?