Signature Detail
Short Name |
HTTP:STC:CLSID:ACTIVEX:ORADC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Oracle Data Control ORADC ActiveX Control Code Execution |
Release Date |
2007/01/30 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Oracle Data Control ORADC ActiveX Control Code Execution
This signature detects attempts to exploit a known vulnerability in the Oracle Data Control (ORADC) ActiveX Object. An attacker can create a malicious Web site containing dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client system.
Extended Description
Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected ActiveX control and possibly to compromise affected computers.
Affected Products
- Oracle Oracle Objects for OLE
References
- BugTraq: 22026
- URL: http://www.hackerscenter.com/archive/view.asp?id=27106