F-Secure Multiple Products ActiveX Remote Code Execution Vulnerability
BID:59443
Info
F-Secure Multiple Products ActiveX Remote Code Execution Vulnerability
| Bugtraq ID: | 59443 |
| Class: | Design Error |
| CVE: |
CVE-2013-7369 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 24 2013 12:00AM |
| Updated: | Jun 09 2014 12:31AM |
| Credit: | Andrea Micalizzi via ZDI |
| Vulnerable: |
F-Secure Anti-Virus for Windows Servers 9 F-Secure Anti-Virus for Citrix Servers 9 |
| Not Vulnerable: | |
Discussion
F-Secure Multiple Products ActiveX Remote Code Execution Vulnerability
Multiple F-Secure products are prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application that uses the affected ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition.
The following products are affected:
F-Secure Anti-Virus for Microsoft Exchange Server versions 9.00 through 9.10
F-Secure Anti-Virus for Windows Servers version 9.00
F-Secure Anti-Virus for Citrix Servers version 9.00
F-Secure Server Security version 9.20
Multiple F-Secure products are prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application that uses the affected ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition.
The following products are affected:
F-Secure Anti-Virus for Microsoft Exchange Server versions 9.00 through 9.10
F-Secure Anti-Virus for Windows Servers version 9.00
F-Secure Anti-Virus for Citrix Servers version 9.00
F-Secure Server Security version 9.20
Exploit / POC
F-Secure Multiple Products ActiveX Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
F-Secure Multiple Products ActiveX Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
F-Secure Multiple Products ActiveX Remote Code Execution Vulnerability
References:
References:
- F-Secure Homepage (F-Secure)