Signature Detail

HTTP: iDefense COMRaider Unsafe ActiveX Control

This signature detects attempts to use unsafe ActiveX controls in iDefense COMRaider. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create arbitrary directories and copy arbitrary local files. This may lead to a denial-of-service condition or aid in further attacks.

Affected Products

• iDefense COMraider

References

• BugTraq: 35725
• BugTraq: 33867
• CVE: CVE-2009-3860
• URL: http://www.juniper.net/security/auto/vulnerabilities/vuln35725.html