Intrusion PreventionAutodesk.LiveUpdate.ActiveX.Control.Access
Description
This indicates an attack attempt against a remote code execution vulnerability in Autodesk LiveUpdate ActiveX Control shipped with multiple products.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted parameter passed to the ApplyPatch() method. It allows a remote attacker to execute arbitrary code.
Affected Products
Autodesk Design Review 2009
Autodesk Revit Architecture 2009
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
We are not aware of any update or patch for this vulnerability as of this writing.
Refer to this guideline on how to set the kill bit for the affected ActiveX Control (CLSID:89EC7921-729B-4116-A819-DF86A4A5776B):
http://support.microsoft.com/kb/240797
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 16015 |
| Created | Nov 18, 2008 |
| Updated | May 04, 2022 |
| Risk |
|
| CVE ID | CVE-2008-4472 |
| Exploit Prediction Score | 2.34% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |