Signature Detail

HTTP: Zenturi ProgramChecker Unsafe ActiveX Control

This signature detects attempts to use unsafe ActiveX controls in Zenturiy ProgramChecker. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client computer.

Extended Description

Zenturi ProgramChecker ActiveX control is prone to a vulnerability that could permit an attacker to delete or overwrite arbitrary files. The attacker can exploit this issue to delete or overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer). NOTE: This issue was previously discussed in BID 24217 (Zenturi ProgramChecker SASATL.DLL ActiveX Control Multiple Buffer Overflow Vulnerabilities), but has been assigned its own record because it is a different vulnerability.

Affected Products

• Zenturi Zenturi ProgramChecker ActiveX Control

References

• BugTraq: 24217
• BugTraq: 24377
• CVE: CVE-2007-2987