Signature Detail

HTTP: Microsoft HxTocCtrl ActiveX Control Access

This signature detects attempts to exploit a known vulnerability in Microsoft's HxTocCtrl control in hxvz.dll. An attacker can create a malicious Web site containing dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.

Affected Products

• Microsoft ie 5.01
• Microsoft ie 6
• Microsoft windows_2003_server *
• Microsoft windows-nt 2008
• Microsoft windows_vista *
• Microsoft windows_xp *

References

• BugTraq: 28606
• CVE: CVE-2008-1086