Signature Detail

HTTP: Microsoft IE CCRP Folder Treeview ActiveX control

This signature detects attempts to use unsafe ActiveX controls in Microsoft IE. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

FolderTreeview is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the vulnerable ActiveX control.

Affected Products

• Common Controls Replacement Project FolderTreeview Control 1.0

References

• BugTraq: 22092
• CVE: CVE-2007-0356