Intrusion Prevention

Lycos.File.Upload.ActiveX.Access

Description

This indicates an attempt to exploit a buffer overflow vulnerability in Lycos File Upload ActiveX control.
The vulnerability is caused by an input validation error when handling the "HandwriterFilename" property in the "FileUploader.FUploadCtl.1" ActiveX control in FileUploader.dll. It allows remote attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.

Affected Products

Lycos FileUploader.dll 2.0 2

Impact

System Compromise: remote attackers can gain control of vulnerable systems.

Recommended Actions

Set the kill bit for CLSID "C36112BF-2FA3-4694-8603-3B510EA3B465".
See the Microsoft Knowledge Base Article below for details of the "kill bit" mechanism.
http://support.microsoft.com/kb/240797

CVE References

CVE-2008-0443