TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
662
avatar can be used as an exploitation vector. Successful exploits may allow attackers to crash the application, denying
further service to users. This issue may also be exploited to execute arbitrary machine-code
Signature ID: 30045
Mozilla Firefox Javascript Navigator Object Remote Code Execution Vulnerability
Threat Level: Warning
Industry ID: CVE-2006-3677
Bugtraq: 19192,19181
Signature Description: Mozilla Firefox is prone to a remote code-execution vulnerability because the application fails
to properly sanitize user-supplied input before using it to create new JavaScript objects. Successful exploits may allow
an attacker to crash the application or execute arbitrary machine code in the context of the affected application.
Signature ID: 30046
Symantec CcErrDsp.ErrorDisplay.1 ActiveX Remote Denial Of Service Vulnerability(1)
Threat Level: Severe
Bugtraq: 12175
Signature Description: This vulnerability is caused due to an input validation error in the CcErrDsp.ErrorDisplay.1
ActiveX control when processing DisplayError method. The vulnerable function takes 7 arguments. Successful exploits
may allow attackers to crash the application, denying further service to users. This issue may also be exploited to
execute arbitrary machine-code.
Signature ID: 30047
Symantec CcErrDsp.ErrorDisplay.1 ActiveX Remote Denial Of Service Vulnerability(2)
Threat Level: Severe
Bugtraq: 12175
Signature Description: This vulnerability is caused due to an input validation error in the CcErrDsp.ErrorDisplay.1
ActiveX control when processing DisplayError method. The vulnerable function takes 7 arguments. Successful exploits
may allow attackers to crash the application, denying further service to users. This issue may also be exploited to
execute arbitrary machine-code. This signature detects attacks using progid.
Signature ID: 30048
Symantec CcErrDsp.ErrorDisplay.1 ActiveX Remote Denial Of Service Vulnerability(3)
Threat Level: Warning
Bugtraq: 12175
Signature Description: This vulnerability is caused due to an input validation error in the CcErrDsp.ErrorDisplay.1
ActiveX control when processing DisplayError method. The vulnerable function takes 7 arguments. Successful exploits
may allow attackers to crash the application, denying further service to users. This issue may also be exploited to
execute arbitrary machine-code. This signature detects attacks using CLSID.
Signature ID: 30049
Mozilla GIF Image Processing Library Remote Heap Overflow Vulnerability
Threat Level: Warning
Industry ID: CVE-2005-0399
Bugtraq: 12881
Signature Description: Multiple Mozilla products are affected by a remote heap-overflow vulnerability. This issue
affects the GIF image processing library used by Mozilla Firefox, Mozilla Browser, and Mozilla Thunderbird Mail
client. A successful attack can result in arbitrary code execution and unauthorized access to the affected computer.
Arbitrary code execution will take place in the context of a user running a vulnerable application.