| Vigil@nce team describes computer vulnerabilities impacting your systems, and offers solutions to correct them. |
|
 |
|
|
|
vulnerability announce CVE-2009-3735 CVE-2010-0252
IE: vulnerabilities of several ActiveX
Synthesis of the vulnerability
| Several ActiveX can be used by a remote attacker to generate a denial of service or to execute code. |
Severity: 3/4.
Creation date: 10/02/2010.
|
Description of the vulnerability
Several ActiveX can be used by a remote attacker to generate a denial of service or to execute code.
An attacker can generate a memory corruption in the Microsoft Data Analyzer max3activex.dll ActiveX. [severity:3/4; BID-38045, CVE-2010-0252, >]
An attacker can generate a memory corruption in the Symantec WinFax Pro 10.3 ActiveX. [severity:3/4; >]
An attacker can generate a memory corruption in the Google Desktop Gadget v5.8 ActiveX. [severity:3/4; BID-38060, >]
An attacker can generate a memory corruption in the Facebook Photo Updater 5.5.8 ActiveX. [severity:3/4; BID-38066, >]
The PandaActiveScan Installer 2.0 as2stubie.dll ActiveX does not check the signature of downloaded components. [severity:3/4; BID-38067, CVE-2009-3735, VU#869993, >] |
Complete Vigil@nce bulletin
Characteristics
Title: IE: vulnerabilities of several ActiveX.
Keywords: 869993 ActiveX Analyzer Data Desktop Facebook Gadget Google Installer Microsoft PandaActiveScan Photo Pro Symantec Updater WinFax as2stubie max3activex several vulnerabilities.
Identifiers: 978262, BID-38045, BID-38060, BID-38066, BID-38067, CVE-2009-3735, CVE-2010-0252, MS10-008, VIGILANCE-VUL-9432, VU#869993.
|
Information sources
Solutions for this vulnerability
Supplements
Vulnerability : Microsoft Data Analyzer ActiveX Control Vulnerability - CVE-2010-0252
An attacker can generate a memory corruption in the Microsoft Data Analyzer max3activex.dll ActiveX.
Severity: 3/4.
Identifiers: BID-38045, CVE-2010-0252.
|
|
Vulnerability : Symantec WinFax Pro 10.3
An attacker can generate a memory corruption in the Symantec WinFax Pro 10.3 ActiveX.
Severity: 3/4.
|
|
Vulnerability : Google Desktop Gadget v5.8
An attacker can generate a memory corruption in the Google Desktop Gadget v5.8 ActiveX.
Severity: 3/4.
Identifiers: BID-38060.
|
|
Vulnerability : Facebook Photo Updater 5.5.8
An attacker can generate a memory corruption in the Facebook Photo Updater 5.5.8 ActiveX.
Severity: 3/4.
Identifiers: BID-38066.
|
|
Vulnerability : PandaActiveScan Installer 2.0 as2stubie.dll
The PandaActiveScan Installer 2.0 as2stubie.dll ActiveX does not check the signature of downloaded components.
Severity: 3/4.
Identifiers: BID-38067, CVE-2009-3735, VU#869993.
|
|
Computer vulnerabilities tracking service
The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer vulnerability database
|
