HTTP: VMLRender ActiveX

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. Attackers can create malicious Web pages containing dangerous Class ID, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Microsoft Windows is prone to a buffer-overrun vulnerability that arises because of an error in the processing of Vector Markup Language documents. An attacker can exploit this issue to execute arbitrary code within the context of the affected application.

Affected Products

Avaya s8100_media_servers,Microsoft windows_2000_server

References

BugTraq: 21930

CVE: CVE-2007-0024

URL: http://support.microsoft.com/?kbid=929969 http://www.microsoft.com/technet/security/Bulletin/MS07-004.mspx

Short Name

HTTP:STC:CLSID:ACTIVEX:VML-AX

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: VMLRender ActiveX

Extended Description

Affected Products

References

Found a potential security threat?