Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

HTTP:STC:ACTIVEX:OURGAME

Severity

High

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Ourgame GLIEDown2.dll unsafe ActiveX Control

Release Date

2008/08/25

Update Number

1252

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: OurGame Unsafe ActiveX Access


This signature detects attempts to use an unsafe ActiveX control in Ourgame GLIEDown2.dll. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this issue to run arbitrary attacker-supplied code in the context of the currently logged-in user. Failed exploits attempts will trigger denial-of-service conditions. Note that GlobalLink 2.8.1.2 beta is also affected by this issue.

Affected Products

  • GlobalLink 2.8.1.2 beta
  • Ourgame GLIEDown2.dll

References

  • BugTraq: 29446
  • BugTraq: 29118

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out