Intrusion PreventionGLWorld.HanGamePluginCN18.ActiveX.Control.Access
Description
This indicates an attempt to exploit a buffer overflow vulnerability in the Lianzong ActiveX control, part of a Chinese gaming platform.
The ActiveX control (CLSID:61F5C358-60FB-4A23-A312-D2B556620F20) is vulnerable to a buffer overflow attack through the "hgs_startgame()" and "hgs_startnotify()" functions. By passing an overly long string, a remote attacker can execute arbitrary code on vulnerable computers.
Affected Products
GLWORLD.2.8.1.2.beta.
Impact
System Compromise: remote attackers can gain control of vulnerable systems.
Recommended Actions
Upgrade to latest version when available, or set the kill bit for the vulnerable ActiveX control.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15387 |
| Created | Feb 06, 2008 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2008-0647 |
| Exploit Prediction Score | 12.54% |
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |