Signature Detail

HTTP: HP Device Access Manager for HP ProtectTools Heap Memory Corruption

This signature detects attempts to use unsafe ActiveX controls in the HP Device Access Manager for HP ProtectTools. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

HP Device Access Manager for HP ProtectTools is prone to a remote heap-memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. HP Device Access Manager for HP ProtectTools versions prior to 6.1.0.1 are vulnerable.

Affected Products

• HP Device Access Manager for HP ProtectTools 5.0.0.5
• HP Device Access Manager for HP ProtectTools 5.0.1.8
• HP Device Access Manager for HP ProtectTools 6.0.0.12

References

• BugTraq: 50895
• CVE: CVE-2011-4162