Computer Associates PSFormX ActiveX Control Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	40494
Class:	Unknown
CVE:	CVE-2010-2193
Remote:	Yes
Local:	No
Published:	Jun 08 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Elazar Broad of Trancek
Vulnerable:	Computer Associates PSFormX 0
Not Vulnerable:

Computer Associates PSFormX ActiveX Control Multiple Remote Code Execution Vulnerabilities

Computer Associates PSFormX ActiveX control is prone to multiple remote code-execution vulnerabilities

Attackers may exploit these issues by enticing an unsuspecting victim to view a malicious webpage.

Successfully exploiting these issues will allow attackers to execute arbitrary witin the context of the application that uses the ActiveX control (typically Internet Explorer).

Computer Associates PSFormX ActiveX Control Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Computer Associates PSFormX ActiveX Control Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available to address this issue. Please see the references for more information.

Computer Associates PSFormX ActiveX Control Multiple Remote Code Execution Vulnerabilities

References:

• Computer Associates Homepage (Computer Associates)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Microsoft Security Bulletin MS10-034 (Microsoft)