Signature Detail

HTTP: Easy Grid Unsafe ActiveX Control

This signature detects attempts to use an unsafe ActiveX control in Easy Grid. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Easy Grid ActiveX is prone to multiple vulnerabilities that let attackers overwrite files with arbitrary, attacker-controlled content. Successful exploits will compromise affected computers and will aid in further attacks. Easy Grid ActiveX 3.51 is vulnerable; other versions may also be affected.

Affected Products

• Easy Grid Control Team Easy Grid ActiveX 3.51

References

• BugTraq: 33272
• CVE: CVE-2009-0134