Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:CLSID:ACTIVEX:AX-153 |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Dangerous ClassID in ActiveX Object Type 153 |
Release Date |
2007/05/08 |
Update Number |
1213 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Dangerous ClassID in ActiveX Object Type 153
This signature detects attempts to exploit a known vulnerability in Internet Explorer. An attacker can create Web pages containing dangerous ActiveX Controls, which if accessed by a victim, can gain control of the client browser.
Extended Description
Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.
Affected Products
- Microsoft ie 5.0.1
- Microsoft ie 6.0
- Microsoft ie 7.0
References