Signature Detail
Short Name |
HTTP:STC:ACTIVEX:CLEARQUEST-OLE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
IBM Rational ClearQuest CQOle ActiveX Code Execution |
Release Date |
2012/04/23 |
Update Number |
2123 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: IBM Rational ClearQuest CQOle ActiveX Code Execution
This signature detects attempts to use unsafe ActiveX controls in IBM Rational ClearQuest. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
IBM Rational ClearQuest is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of the application, typically Internet Explorer, that uses the affected ActiveX control. Failed attacks will likely cause denial-of-service conditions. IBM Rational ClearQuest versions 8.0, 8.0.0.1 and 7.1.1 through 7.1.2.5 are vulnerable.
Affected Products
- IBM IBM Rational ClearQuest 7.1.1
- IBM IBM Rational ClearQuest 7.1.2.5
- IBM IBM Rational ClearQuest 8.0
- IBM IBM Rational ClearQuest 8.0.0.1
References
- BugTraq: 53170
- CVE: CVE-2012-0708
- URL: http://www.ibm.com/support/docview.wss?uid=swg21591705