Signature Detail

HTTP: Office OCX Unsafe ActiveX Control

This signature detects attempts to exploit and known vulnerability in Office OCX. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Multiple Office OCX ActiveX controls are prone to a vulnerability that lets attackers execute arbitrary remote files. An attacker can exploit this issue to execute arbitrary code in the context of an application using the affected ActiveX control (typically Internet Explorer). This may aid in further attacks. The following ActiveX controls are vulnerable: Office Viewer OCX 3.0.1 Word Viewer OCX 3.2 PowerPoint Viewer OCX 3.1 Excel Viewer OCX 3.2

Affected Products

• Office_ocx excel_viewer_ocx 3.2
• Office_ocx office_viewer_ocx 3.0.1
• Office_ocx powerpoint_viewer_ocx 3.1
• Office_ocx word_viewer_ocx 3.2

References

• BugTraq: 33243
• BugTraq: 33222
• CVE: CVE-2007-2495
• URL: http://www.juniper.net/security/auto/vulnerabilities/vuln33222.html