Intrusion PreventionIBM.Access.Support.AcpController.dll.ActiveX.Control.Access
Description
This indicates an attempt to exploit vulnerabilities in the "IBM Lenovo Access Support" ActiveX control, "acpRunner". The vulnerabilities are caused by errors in the "AcpController.dll" control. They allow remote attackers to execute arbitrary code via a specially crafted web page.
Affected Products
IBM "acpcontroller.dll" ActiveX Control versions prior to 1.2.8.0
IBM "acpir.dll" ActiveX Control versions prior to 1.0.0.9
Impact
System compromise, remote code execution.
Recommended Actions
Apply patch, available from the Web site.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 14895 |
| Created | Aug 21, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-2928 CVE-2007-2929 CVE-2007-2240 |
| Exploit Prediction Score | 13.44% |
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | IBM |