Signature Detail
Short Name |
HTTP:STC:ACTIVEX:PEACHTREE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Peachtree Accounting PAWWeb11.ocx Unsafe ActiveX Control |
Release Date |
2012/11/07 |
Update Number |
2201 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Peachtree Accounting PAWWeb11.ocx Unsafe ActiveX Control
This signature detects attempts to use unsafe ActiveX controls in Peachtree Accounting. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client computer.
Extended Description
The Peachtree Accounting 'PAWWeb11.ocx' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote attackers to launch arbitrary applications with the privileges of the application running the ActiveX control (typically Internet Explorer). The issue affects Peachtree Accounting 2004; other versions may also be affected.
Affected Products
- Sage Peachtree Accounting 2004
References
- BugTraq: 31096
- CVE: CVE-2008-4699