TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
223
Signature ID: 1543
Microsoft Internet Explorer DXImageTransform.Microsoft.Light ActiveX Arbitrary Code
Execution Vulnerability(1)
Threat Level: Warning
Industry ID: CVE-2006-2383 Bugtraq: 18303
Signature Description: Microsoft Directx is a collection of industry-leading technologies designed to deliver the most
advanced, stable, and visually impressive graphics experience on Microsoft platforms. Microsoft Internet Explorer
(Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1) is a memory corruption vulnerability in the DXImage
Transform.Microsoft.Light ActiveX control. By persuading a malicious web page that passes a specially-crafted data to
the affected control, a remote attacker could execute arbitrary commands on a victim's system with privileges of the
victim.
Signature ID: 1544
Microsoft Internet Explorer DXImageTransform.Microsoft.Light ActiveX Arbitrary Code
Execution Vulnerability(2)
Threat Level: Warning
Industry ID: CVE-2006-2383 Bugtraq: 18303
Signature Description: Microsoft Directx is a collection of industry-leading technologies designed to deliver the most
advanced, stable, and visually impressive graphics experience on Microsoft platforms. Microsoft Internet Explorer
(Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1) is a memory corruption vulnerability in the DXImage
Transform.Microsoft.Light ActiveX control. By persuading a malicious web page that passes a specially-crafted data to
the affected control, a remote attacker could execute arbitrary commands on a victim's system with privileges of the
victim. This Signature detects the Progid(DXImageTransform.Microsoft.Light).
Signature ID: 1545
Microsoft Internet Explorer DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX
Arbitrary Code Execution Vulnerability
Threat Level: Warning
Industry ID: CVE-2006-1303 Bugtraq: 18328
Signature Description: Microsoft Directx is a collection of industry-leading technologies designed to deliver the most
advanced, stable, and visually impressive graphics experience on Microsoft platforms. Microsoft Internet Explorer
(Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1) is a memory corruption vulnerability regarding the handling
of COM objects. By persuading a malicious web page containing an invalid DXImage
Transform.Microsoft.MMSpecialEffect1Input ActiveX object, a remote attacker could execute arbitrary code and gain
complete control over the victim's system.
Signature ID: 1546
Microsoft Internet Explorer DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX
Arbitrary Code Execution Vulnerability
Threat Level: Warning
Industry ID: CVE-2006-1303 Bugtraq: 18328
Signature Description: Microsoft Directx is a collection of industry-leading technologies designed to deliver the most
advanced, stable, and visually impressive graphics experience on Microsoft platforms. Microsoft Internet Explorer
(Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1) is a memory corruption vulnerability regarding the handling
of COM objects. By persuading a malicious web page containing an invalid DXImage
Transform.Microsoft.MMSpecialEffect2Input ActiveX object, a remote attacker could execute arbitrary code and gain
complete control over the victim's system.