Signature Detail
Short Name |
HTTP:STC:ACTIVEX:HPQUTIL |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
HP All-in-One and HP Photo & Imaging Gallery Overflow |
Release Date |
2007/10/01 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: HP All-in-One and HP Photo & Imaging Gallery Overflow
This signature detects attempts to exploit a known vulnerability in HP All-in-One and HP Photo and Imaging Gallery. An attacker can create malicious Web pages containing dangerous ActiveX code, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of applications that use the vulnerable method. The MFC library included with Microsoft Windows XP SP2 is affected; other versions may also be affected. This issue also occurs in the 'hpqutil.dll' ActiveX control identified by CLSID: F3F381A3-4795-41FF-8190-7AA2A8102F85.
Affected Products
- HP All-in-One Series Web Release 2.1.0
- HP Photo and Image Gallery 1.1
- Microsoft Windows XP Home SP2
- Microsoft Windows XP Media Center Edition SP2
- Microsoft Windows XP Professional SP2
- Microsoft Windows XP Tablet PC Edition SP2
References
- BugTraq: 25697
- CVE: CVE-2007-4916