Signature Detail

HTTP: Gateway CWebLaunchCtl ActiveX Control Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Gateway CWebLaunchCtl ActiveX Control. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Gateway CWebLaunchCtl ActiveX control is prone to an arbitrary-command-execution vulnerability and a buffer-overflow vulnerability. An attacker can exploit these issues to execute arbitrary local scripts and to execute remote code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions. These issues affect weblaunch.ocx 1.0.0.1 and weblaunch2.ocx, which provide the ActiveX control; other versions may also be affected.

Affected Products

• Gateway weblaunch2.ocx_cweblaunchctl_activex_control 2.0
• Gateway weblaunch.ocx_cweblaunchctl_activex_control 1.0.0.1

References

• BugTraq: 27193
• URL: http://www.securityfocus.com/advisories/13740