Signature Detail

HTTP: Beyond Security beSTORM WinGraphviz.dll Unsafe ActiveX Control

This signature detects attempts to use unsafe ActiveX control against Beyond Security beSTORM. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

WinGraphviz is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will likely cause denial-of-service conditions. Note: This BID is being retired; the issue can not be exploited as described.

Affected Products

• Beyond Security beSTORM 3.5.6
• WinGraphviz

References

• BugTraq: 54458
• URL: http://www.beyondsecurity.com/