HTTP: Microsoft Internet Explorer XML Remote Command Execution

This signature detects attempts to use unsafe ActiveX controls in XML Core Services. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Microsoft XML Core Services is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft XML Core Services versions 3.0, 4.0, 5.0, and 6.0 are affected.

Affected Products

Avaya messaging_application_server,Avaya communication_server_1000_telephony_manager

References

BugTraq: 25301 53934

CVE: CVE-2012-1889

URL: http://technet.microsoft.com/en-us/security/advisory/2719615

Short Name

HTTP:STC:IE:XML-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Internet Explorer XML Remote Command Execution

Extended Description

Affected Products

References

Found a potential security threat?