Signature Detail
Short Name |
HTTP:STC:DL:MSCOMCTL-ACTIVEX |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Common Controls MSCOMCTL.OCX Activex Remote Code Execution |
Release Date |
2012/08/13 |
Update Number |
2172 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Common Controls MSCOMCTL.OCX Activex Remote Code Execution
This signature detects attempts to use unsafe ActiveX controls in Microsoft MSCOMCTL.OCX. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
Microsoft Windows Common Controls is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control.
Affected Products
- Microsoft BizTalk Server 2002 SP1
- Microsoft Commerce Server 2002 SP4
- Microsoft Commerce Server 2007 SP2
- Microsoft Commerce Server 2009 R2
- Microsoft Commerce Server 2009
- Microsoft Host Integration Server 2004 SP1
- Microsoft Office 2003 SP3
- Microsoft Office 2003 Web Components SP3
- Microsoft Office 2007 SP2
- Microsoft Office 2007 SP3
- Microsoft Office 2010 (32-bit edition) SP1
- Microsoft SQL Server 2000 SP4
- Microsoft SQL Server 2000 Analysis Services SP4
- Microsoft SQL Server 2005 SP4
- Microsoft SQL Server 2005 Express Edition with Advanced Serv SP1
- Microsoft SQL Server 2005 Express Edition with Advanced Serv SP2
- Microsoft SQL Server 2005 Express Edition with Advanced Serv SP3
- Microsoft SQL Server 2005 Express Edition with Advanced Serv SP4
- Microsoft SQL Server 2005 Itanium Edition SP4
- Microsoft SQL Server 2005 x64 Edition SP4
- Microsoft SQL Server 2008 R2
- Microsoft SQL Server 2008 R2 SP1
- Microsoft SQL Server 2008 32-bit R2
- Microsoft SQL Server 2008 32-bit SP2
- Microsoft SQL Server 2008 32-bit SP3
- Microsoft SQL Server 2008 itanium R2
- Microsoft SQL Server 2008 itanium SP2
- Microsoft SQL Server 2008 itanium SP3
- Microsoft SQL Server 2008 x64 R2
- Microsoft SQL Server 2008 x64 SP2
- Microsoft SQL Server 2008 x64 SP3
- Microsoft Visual Basic 6.0 Runtime
- Microsoft Visual FoxPro 8.0 SP1
- Microsoft Visual FoxPro 9.0 SP2
References
- BugTraq: 54948
- CVE: CVE-2012-1856