Intrusion PreventionTeeChart.Professional.ActiveX.Code.Execution
Description
This indicates an attack attempt against an Integer Overflow vulnerability in TeeChart Professional ActiveX Control.
The vulnerability, which is located in multiple TeeChart ActiveX control, can be exploited through misuse of a vulnerable method "AddSeries". An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the application.
Affected Products
TeeChart5.ocx Version 5.0.1.0
TeeChart6.ocx Version 6.0.0.5
TeeChart7.ocx Version 7.0.1.4
TeeChart8.ocx Version 8.0.0.8
TeeChart2010.ocx Version 2010.0.0.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are unaware of any vendor supplied patch or updates available for this issue.
Disable this ActiveX Control by setting its kill bit, by the method shown on the website: http://support.microsoft.com/kb/240797
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 34302 |
| Created | Jan 18, 2013 |
| Updated | Jun 07, 2022 |
| Risk |
|
| CVE ID | CVE-2011-4034 |
| Exploit Prediction Score | 1.77% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |