Signature Detail

HTTP: Nokia Phoenix Service Software Unsafe ActiveX Control

This signature detects attempts to use an unsafe ActiveX control in Nokia Phoenix Service. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Nokia Phoenix Service Software ActiveX controls are prone to multiple buffer-overflow vulnerabilities because they fail to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers. An attacker can exploit these issues to execute arbitrary code within the context of the application that invoked the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition. Nokia Phoenix Service Software 2008.04.007.32837 is vulnerable; other versions may also be affected.

Affected Products

• Nokia Phoenix Service Software 2008.04.007.32837

References

• BugTraq: 33726
• URL: http://www.juniper.net/security/auto/vulnerabilities/vuln33726.html