Signature Detail

HTTP: McAfee Visual Trace ActiveX Control

This signature detects attempts to use unsafe ActiveX controls in McAfee Visual Trace. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

The NeoTraceExplorer.NeoTraceLoader ActiveX control shipped with NeoTrace is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer. NeoTrace Express 3.25 and NeoTrace Professional 3.25 are vulnerable to this issue.

Affected Products

• McAfee NeoTrace Express 3.25
• McAfee NeoTrace Professional 3.25

References

• BugTraq: 21697
• CVE: CVE-2006-6707