Intrusion PreventionAttachmate.Reflection.GetSiteProperties3.Memory.Corruption
Description
This indicates an attempt to exploit a Memory Corruption vulnerability in the Attachmate Reflection ActiveX control.
The vulnerability, which is due to an error in Reflection FTP Client ActiveX control, can be exploited through misuse of a vulnerable method. A remote attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the targeted users' browser.
Affected Products
Attachmate INFOConnect Enterprise prior to 9.2.0.1182
Attachmate Reflection FTP Client prior to 14.1.420.0
Impact
System Compromise: Remote attackers can execute arbitrary code within the context of the target user's browser
Recommended Actions
Apply the most recent upgrade or patch from the vendor
http://support.attachmate.com/techdocs/2501.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 39069 |
| Created | Sep 10, 2014 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2014-0606 |
| Exploit Prediction Score | 0.21% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |