Signature Detail
Short Name |
HTTP:STC:CLSID:ACTIVEX:HTML-HLP |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft HTML Help ActiveX Exploit |
Release Date |
2007/02/13 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft HTML Help ActiveX Exploit
This signature detects attempts to exploit a known vulnerability in Microsoft's HTML Help ActiveX control. An attacker could exploit the vulnerability by constructing a specially crafted Web page that can potentially allow remote code execution if a user visited that page. An attacker who successfully exploited this vulnerability can take complete control of an affected system.
Extended Description
The Microsoft HTML Help ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page.
Affected Products
- Avaya Agent Access
- Avaya Basic Call Management System Reporting Desktop server
- Avaya Basic Call Management System Reporting Desktop
- Avaya CMS Supervisor
- Avaya Computer Telephony
- Avaya Contact Center Express
- Avaya CVLAN
- Avaya Enterprise Management
- Avaya Integrated Management
- Avaya Interaction Center
- Avaya Interaction Center - Voice Quick Start
- Avaya IP Agent
- Avaya IP Softphone
- Avaya Messaging Application Server
- Avaya Modular Messaging (MAS)
- Avaya Network Reporting
- Avaya OctelAccess(r) Server
- Avaya OctelDesignerTM
- Avaya Operational Analyst
- Avaya Outbound Contact Management
- Avaya S8100 Media Servers R10
- Avaya S8100 Media Servers R11
- Avaya S8100 Media Servers R12
- Avaya S8100 Media Servers R6
- Avaya S8100 Media Servers R7
- Avaya S8100 Media Servers R8
- Avaya S8100 Media Servers R9
- Avaya S8100 Media Servers
- Avaya Speech Access
- Avaya Unified Communication Center
- Avaya Unified Communications Center S3400
- Avaya Unified Messenger (r)
- Avaya VPNmanagerTM Console
- Avaya Web Messenger
- HP Storage Management Appliance 2.1
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP3
- Microsoft Windows 2000 Advanced Server SP4
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP3
- Microsoft Windows 2000 Datacenter Server SP4
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP3
- Microsoft Windows 2000 Professional SP4
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP3
- Microsoft Windows 2000 Server SP4
- Microsoft Windows 2000 Server
- Microsoft Windows Server 2003 Datacenter Edition SP1
- Microsoft Windows Server 2003 Datacenter Edition
- Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
- Microsoft Windows Server 2003 Datacenter Edition Itanium
- Microsoft Windows Server 2003 Datacenter x64 Edition
- Microsoft Windows Server 2003 Enterprise Edition SP1
- Microsoft Windows Server 2003 Enterprise Edition
- Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
- Microsoft Windows Server 2003 Enterprise Edition Itanium
- Microsoft Windows Server 2003 Enterprise x64 Edition
- Microsoft Windows Server 2003 Standard Edition SP1
- Microsoft Windows Server 2003 Standard Edition
- Microsoft Windows Server 2003 Standard x64 Edition
- Microsoft Windows Server 2003 Web Edition SP1
- Microsoft Windows Server 2003 Web Edition
- Microsoft Windows XP
- Microsoft Windows XP Home SP1
- Microsoft Windows XP Home SP2
- Microsoft Windows XP Home
- Microsoft Windows XP Media Center Edition SP1
- Microsoft Windows XP Media Center Edition SP2
- Microsoft Windows XP Media Center Edition
- Microsoft Windows XP Professional SP1
- Microsoft Windows XP Professional SP2
- Microsoft Windows XP Professional
- Microsoft Windows XP Professional x64 Edition
- Microsoft Windows XP Tablet PC Edition SP1
- Microsoft Windows XP Tablet PC Edition SP2
- Microsoft Windows XP Tablet PC Edition
- Nortel Networks CallPilot 1002Rp
- Nortel Networks CallPilot 200I
- Nortel Networks CallPilot 201I
- Nortel Networks CallPilot 702T
- Nortel Networks CallPilot 703T
- Nortel Networks Centrex IP Client Manager 2.5.0
- Nortel Networks Centrex IP Client Manager 7.0.0
- Nortel Networks Centrex IP Client Manager 8.0.0
- Nortel Networks Centrex IP Client Manager 9.0
- Nortel Networks Centrex IP Client Manager
- Nortel Networks Contact Center
- Nortel Networks Contact Center Express
- Nortel Networks Contact Center Manager
- Nortel Networks Contact Center Manager Server
- Nortel Networks Contact Center - TAPI Server
- Nortel Networks Symposium Agent
- Nortel Networks Symposium Network Control Center (NCC)
- Nortel Networks Symposium TAPI Service Provider
References
- BugTraq: 22478
- CVE: CVE-2007-0214
- URL: http://www.microsoft.com/technet/security/Bulletin/MS07-008.mspx