Short Name |
HTTP:STC:ACTIVEX:CA-XMLSECDB |
---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
CA Internet Security Suite XMLSecDB ActiveX Vulnerability |
Release Date |
2011/03/07 |
Update Number |
1877 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects attempts to exploit a known insecure file creation vulnerability in CA Internet Security Suite. It is due to an error when the XMLSecDB ActiveX control, which is installed with the HIPSEngine component, handles SetXml and Save methods. A remote unauthenticated attacker can exploit this by enticing a target user to open a maliciously crafted HTML page. A successful attack can allow attackers to execute arbitrary code within the context of the current user.
CA Host-Based Intrusion Prevention System(HIPS) is prone to a remote code-execution vulnerability. An attacker can exploit this vulnerability to execute arbitrary code in the context of the logged-in user. Failed exploits result in denial-of-service conditions. Internet Security Suite 2008 is vulnerable; other versions may also be affected.