Signature Detail

HTTP: Microsoft XML Core Service XMLHTTP ActiveX Control

This signature detects attempts to use unsafe ActiveX controls in Microsoft XML Core Service. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Microsoft XML Core Service is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the affected application, facilitating the remote compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Avaya messaging_application_server
• Avaya s8100_media_servers R10
• Avaya s8100_media_servers R11
• Avaya s8100_media_servers R12
• Avaya s8100_media_servers R6
• Avaya s8100_media_servers R7
• Avaya s8100_media_servers R8
• Avaya s8100_media_servers R9
• Avaya s8100_media_servers
• Hp storage_management_appliance 2.1
• Microsoft xml_core_services 4.0
• Microsoft xml_core_services 6.0

References

• BugTraq: 20915
• BugTraq: 39489
• CVE: CVE-2009-4596
• CVE: CVE-2006-5745
• CVE: CVE-2010-0432
• URL: http://www.kb.cert.org/vuls/id/585137