TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
1030
Signature ID: 36425
PowerPoint Viewer OCX Activex Vulnerability
Threat Level: Severe
Bugtraq: 33238
Signature Description: PowerPoint Viewer OCX acts as an ActiveX document container for hosting PowerPoint
documents in a custom form or Web page. The OCX is lightweight and flexible, and gives developers new possibilities
for using Microsoft PowerPoint in a custom solution. This rule hits when the vulnerable activex and hex encoded data
present in the http response.
Signature ID: 36426
PowerPoint Viewer OCX Activex Vulnerability
Threat Level: Severe
Bugtraq: 33238
Signature Description: PowerPoint Viewer OCX acts as an ActiveX document container for hosting PowerPoint
documents in a custom form or Web page. The OCX is lightweight and flexible, and gives developers new possibilities
for using Microsoft PowerPoint in a custom solution. This rule hits when http response contains the vulnerable activex
and contains %u encoded data.
Signature ID: 36427
PowerPoint Viewer OCX Activex Vulnerability
Threat Level: Severe
Bugtraq: 33238
Signature Description: PowerPoint Viewer OCX acts as an ActiveX document container for hosting PowerPoint
documents in a custom form or Web page. The OCX is lightweight and flexible, and gives developers new possibilities
for using Microsoft PowerPoint in a custom solution. No Remedy available. User can set the killbit to the vulnerable
activex. By persuading a victim to visit a malicious Web page, containing UTF-16 encoded data
Signature ID: 36428
PowerPoint Viewer OCX Activex Vulnerability
Threat Level: Warning
Bugtraq: 33238
Signature Description: PowerPoint Viewer OCX acts as an ActiveX document container for hosting PowerPoint
documents in a custom form or Web page. The OCX is lightweight and flexible, and gives developers new possibilities
for using Microsoft PowerPoint in a custom solution. er overflow attack. The remote attacker can exploit this issue by
enticing the users to visit malicious web pages. The successful remote attacker can execute arbitrary code in the context
of the application using the vulnerable activex. No Remedy available. User can set killbit to the clsid corresponding to
the progid PowerPoint.Show to resolve this issue.
Signature ID: 36429
PowerPoint Viewer OCX Activex Vulnerability
Threat Level: Severe
Bugtraq: 33238
Signature Description: PowerPoint Viewer OCX acts as an ActiveX document container for hosting PowerPoint
documents in a custom form or Web page. The OCX is lightweight and flexible, and gives developers new possibilities
for using Microsoft PowerPoint in a custom solution. The remote attacker can exploit this issue by enticing the users to
visit malicious web pages. The successful remote attacker can execute arbitrary code in the context of the application
using the vulnerable activex. No Remedy available. User can set the killbit to the vulnerable activex. User can set
killbit to the clsid corresponding to the progid PowerPoint.Show to resolve this issue.