Intrusion PreventionLycos.File.Upload.ActiveX.Access
Description
This indicates an attempt to exploit a buffer overflow vulnerability in Lycos File Upload ActiveX control.
The vulnerability is caused by an input validation error when handling the "HandwriterFilename" property in the "FileUploader.FUploadCtl.1" ActiveX control in FileUploader.dll. It allows remote attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.
Affected Products
Lycos FileUploader.dll 2.0 2
Impact
System Compromise: remote attackers can gain control of vulnerable systems.
Recommended Actions
Set the kill bit for CLSID "C36112BF-2FA3-4694-8603-3B510EA3B465".
See the Microsoft Knowledge Base Article below for details of the "kill bit" mechanism.
http://support.microsoft.com/kb/240797
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 15363 |
| Created | Jan 29, 2008 |
| Updated | Nov 03, 2021 |
| Risk |
|
| CVE ID | CVE-2008-0443 |
| Exploit Prediction Score | 16.57% |
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |