|
|
Info |
Last Modified |
| 11 months ago |
|
|
|
|
Keywords |
aka "ActiveX Object Vulnerability", CLSID 8B217746-717D-11CE-AB5B-D41203C10000
|
|
Description |
Internet Explorer contains a flaw that may permit a remote attacker to execute arbitrary code via unknown attack vectors. The issue is the result of an incorrect IObjectsafety implementation and MS VB6 objects. It is possible that the flaw may result in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation,
Other
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Microsoft has released MS07-045 to address this issue. Additionally, it is possible to correct the flaw by implementing the following workaround(s): prevent COM objects from running in IE and/or configure Internet and Local Intranet security zone settings to "High" to prompt before running ActiveX Controls and Active Scripting in these zones.
|
|
Products |
|
Internet Explorer
 |
5.0 1 |
6 SP1 |
7 |
|
|
|
|
|
|
Credit |
- Brett Moore - brett.moore
 security-assessment.com - Security Assessment
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
