IMesh.IMWebControl.Class.ActiveX.Control.Access

Description

This indicates an attempt to exploit a memory corruption vulnerability in iMesh.
The vulnerability is caused by an input validation error in the IMWeb.IMWebControl.1 ActiveX control (IMWebControl.dll), in the "SetHandler()" and "ProcessRequestEx()" methods. It allows remote attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.

Affected Products

iMesh 7.1 and prior versions.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Set the kill bit for the IMWeb.IMWebControl.1 ActiveX control.

References