Signature Detail
Short Name |
HTTP:STC:ACTIVEX:GUI-CM-CTRLS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Computer Associates GUI_CM_CTRLS ActiveX Exploit |
Release Date |
2008/07/22 |
Update Number |
1216 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Computer Associates GUI_CM_CTRLS ActiveX Exploit
This signature detects attempts to exploit a known vulnerability is Computer Associates' GUI_CM_CTRLS ActiveX control. An attacker can create a malicious Web site containing dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
Computer Associates DSM 'gui_cm_ctrls.ocx' ActiveX control is prone to a remote code-execution vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Successful exploits will compromise the application and possibly the underlying computer. Failed attacks will cause denial-of-service conditions.
Affected Products
- Computer Associates ARCserve Backup for Laptops and Desktops 11.5
- Computer Associates Desktop and Server Management 11.1a
- Computer Associates Desktop and Server Management 11.1 C1
- Computer Associates Desktop and Server Management 11.1 GA
- Computer Associates Desktop and Server Management 11.2
- Computer Associates Desktop and Server Management 11.2a
- Computer Associates Desktop and Server Management 11.2 C1
- Computer Associates Desktop and Server Management 11.2 C2
- Computer Associates Desktop Management Suite 11.1
- Computer Associates Desktop Management Suite 11.1a
- Computer Associates Desktop Management Suite 11.1 C1
- Computer Associates Desktop Management Suite 11.1 GA
- Computer Associates Desktop Management Suite 11.2
- Computer Associates Desktop Management Suite 11.2a
- Computer Associates Desktop Management Suite 11.2 C1
- Computer Associates Desktop Management Suite 11.2 C2
- Computer Associates Remote Control 11.1 C1
- Computer Associates Unicenter Asset Management 11.1
- Computer Associates Unicenter Asset Management 11.1a
- Computer Associates Unicenter Asset Management 11.1 C1
- Computer Associates Unicenter Asset Management 11.1 GA
- Computer Associates Unicenter Asset Management 11.2
- Computer Associates Unicenter Asset Management 11.2a
- Computer Associates Unicenter Asset Management 11.2 C1
- Computer Associates Unicenter Desktop Management Bundle 11.1
- Computer Associates Unicenter Desktop Management Bundle 11.1a
- Computer Associates Unicenter Desktop Management Bundle 11.1 C1
- Computer Associates Unicenter Desktop Management Bundle 11.1 GA
- Computer Associates Unicenter Desktop Management Bundle 11.2
- Computer Associates Unicenter Desktop Management Bundle 11.2a
- Computer Associates Unicenter Desktop Management Bundle 11.2 C1
- Computer Associates Unicenter Desktop Management Bundle 11.2 C2
- Computer Associates Unicenter Remote Control 11.1
- Computer Associates Unicenter Remote Control 11.1a
- Computer Associates Unicenter Remote Control 11.1 GA
- Computer Associates Unicenter Remote Control 11.2
- Computer Associates Unicenter Remote Control 11.2a
- Computer Associates Unicenter Remote Control 11.2 C1
- Computer Associates Unicenter Remote Control 11.2 C2
- Computer Associates Unicenter Software Delivery 11.1
- Computer Associates Unicenter Software Delivery 11.1a
- Computer Associates Unicenter Software Delivery 11.1 C1
- Computer Associates Unicenter Software Delivery 11.1 GA
- Computer Associates Unicenter Software Delivery 11.2
- Computer Associates Unicenter Software Delivery 11.2a
- Computer Associates Unicenter Software Delivery 11.2 C1
- Computer Associates Unicenter Software Delivery 11.2 C2
References
- BugTraq: 28809
- CVE: CVE-2008-1786