Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:ACTIVEX:IE-DA |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Internet Explorer DirectAnimation Unsafe ActiveX Control |
Release Date |
2006/09/15 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Internet Explorer DirectAnimation Unsafe ActiveX Control
This signature detects attempts to exploit a known vulnerability against Internet Explorer. Malicious Web sites, containing dangerous ActiveX references, can exploit this vulnerability and gain control of client browsers.
Extended Description
Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue stems from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX controls, resulting in arbitrary code execution. The affected objects are not intended to be instantiated through Internet Explorer.
Affected Products
- Microsoft internet_explorer 5.0
- Microsoft internet_explorer 5.0.1
- Microsoft internet_explorer 5.0.1 SP1
- Microsoft internet_explorer 5.0.1 SP2
- Microsoft internet_explorer 5.0.1 SP3
- Microsoft internet_explorer 5.0.1 SP4
- Microsoft internet_explorer 6.0
- Microsoft internet_explorer 6.0 SP1
- Nortel_networks callpilot 1002Rp
- Nortel_networks callpilot 200I
- Nortel_networks callpilot 201I
- Nortel_networks callpilot 702T
- Nortel_networks callpilot 703T
- Nortel_networks centrex_ip_client_manager
- Nortel_networks centrex_ip_element_manager
- Nortel_networks contact_center-agent_desktop_display
- Nortel_networks symposium_agent
References
- BugTraq: 19340
- CVE: CVE-2006-3638