ActiveX Blocked (ActiveX_Blocked)

About this signature or vulnerability

IBM Security Server Protection for Windows, Proventia Network MFS, Proventia-G 1.1 and earlier, Proventia Network IDS, RealSecure Network, RealSecure Server Sensor, Proventia Desktop, Proventia Network IPS, Proventia Server IPS for Linux technology, Virtual Server Protection for Vmware:

This signature detects ActiveX controls that are associated with a vulnerability. This signature does not necessarily indicate an exploit, merely the use of the vulnerable control.


Default risk level

High risk vulnerability  High

Sensors that have this signature

IBM Security Server Protection for Windows: 2.1.14.2420, IBM Security Server Protection for Windows: 2.0.300.2420, IBM Security Server Protection for Windows: 1.0.914.2420, Proventia Network MFS: XPU 29.080, Proventia-G 1.1 and earlier: XPU 29.080, Proventia Network IDS: XPU 29.080, RealSecure Network: XPU 29.080, RealSecure Server Sensor: XPU 29.080, Proventia Desktop: 2420, Proventia Network IPS: XPU 29.080, Proventia Server IPS for Linux technology: 29.080, Virtual Server Protection for Vmware: 1.0

Systems affected

Microsoft Windows 95, Microsoft Windows NT: 4.0, Microsoft Windows 98, Microsoft Windows 98SE, Microsoft Windows 2000, Microsoft Windows Me, Microsoft Windows XP, Microsoft Windows 2003 Server, Microsoft Windows Vista, Microsoft Windows Server 2008

Type

Unauthorized Access Attempt

Vulnerability description

A vulnerable ActiveX control has been detected. By persuading a victim to visit the malicious Web page that utilizes specific COM/ActiveX objects, a remote attack could launch various attacks against the victim's system.

How to remove this vulnerability

This check is for informational purposes only.

References

ISS X-Force
ActiveX Blocked
http://www.iss.net/security_center/static/51833.php