Signature Detail
Short Name |
HTTP:STC:ACTIVEX:GESTEC-ELONFMT |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Gesytec GmbH ElonFmt ActiveX |
Release Date |
2011/04/25 |
Update Number |
1909 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Gesytec GmbH ElonFmt ActiveX
This signature detects attempts to use unsafe ActiveX controls in Gesytec GmbH ElonFmt. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
Gesytec GmbH ElonFmt ActiveX control 'ElonFmt.ocx' is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts likely result in denial-of-service conditions. ElonFmt ActiveX 1.1.14 is affected; other versions may also be vulnerable.
Affected Products
- Gesytec GmbH ElonFmt ActiveX 1.1.14
References
- BugTraq: 47533
- URL: http://www.gesytec.de