Signature Detail

HTTP: FlexCell Grid Unsafe ActiveX Control

This signature detects attempts to use an unsafe ActiveX control in FlexCell Grid. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

FlexCell Grid Control (ActiveX) is prone to two vulnerabilities that let attackers overwrite files with arbitrary, attacker-controlled content. Successfully exploiting these issues will allow an attacker to corrupt and overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer). FlexCell Grid Control (ActiveX) 5.6.9 is vulnerable; other versions may also be affected.

Affected Products

• FlexCell Technologies FlexCell Grid Control (ActiveX) 5.6.9

References

• BugTraq: 33453
• CVE: CVE-2009-0301