Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

HTTP:STC:ACTIVEX:PANASONIC-API

Severity

High

Recommended

Yes

Recommended Action

Drop

Category

HTTP

Keywords

Panasonic Security API SDK Unsafe ActiveX Control

Release Date

2015/07/14

Update Number

2515

Supported Platforms

di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: Panasonic Security API SDK Unsafe ActiveX Control


This signature detects attempts to use unsafe ActiveX controls in Panasonic Security API SDK. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client application.

References

  • CVE: CVE-2015-4648
  • CVE: CVE-2015-4647
  • URL: http://security.panasonic.com/pss/security/library/developer.html#sdk
  • URL: http://www.zerodayinitiative.com/advisories/zdi-15-260/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out