Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability
BID:27997
Info
Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability
| Bugtraq ID: | 27997 |
| Class: | Design Error |
| CVE: |
CVE-2008-1116 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 25 2008 12:00AM |
| Updated: | May 07 2015 05:32PM |
| Credit: | John Smith discovered this vulnerability. |
| Vulnerable: |
Rising Antivirus International Rising Web Scan Object 'OL2005.dll' 18.0 7 |
| Not Vulnerable: | |
Discussion
Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability
Rising Web Scan Object 'OL2005.dll' ActiveX control is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code on a victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
This issue affects Rising Web Scan Object 'OL2005.dll' 18.0.0.7; other versions may also be affected.
Rising Web Scan Object 'OL2005.dll' ActiveX control is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code on a victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
This issue affects Rising Web Scan Object 'OL2005.dll' 18.0.0.7; other versions may also be affected.
Exploit / POC
Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted web page.
The DeepSight Threat Analyst Team has detected that this issue is being exploited in the wild.
The following proof-of-concept exploit is available:
To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted web page.
The DeepSight Threat Analyst Team has detected that this issue is being exploited in the wild.
The following proof-of-concept exploit is available:
Solution / Fix
Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability
Solution:
The vendor has released fixes to address this issue. The vendor states that updates were made available as of February 26, 2008 at the following URI:
http://online.rising.com.cn/free/rav.htm
Solution:
The vendor has released fixes to address this issue. The vendor states that updates were made available as of February 26, 2008 at the following URI:
http://online.rising.com.cn/free/rav.htm
References
Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Rising Online Antivirus (Rising)
- Rising Online Antivirus Free Page (Rising)