Oracle AutoVue AutoVueX ActiveX Control SaveViewStateToFile Vulnerability
Publish date: 21 de julio de 2015
Gravedad: Crítico
Fecha recomendada: 21 de julio de 2015
Descripción
Oracle AutoVue 'AutoVueX.ocx' ActiveX control is prone to a vulnerability caused by insecure methods. Successfully exploiting this issue will allow attackers to create or overwrite arbitrary files on the victim's computer within the context of the affected application (typically Internet Explorer) that uses the ActiveX control.
Revelación de la información
Apply associated Trend Micro DPI Rules.
Soluciones
Trend Micro Deep Security DPI Rule Number: 1004829
Trend Micro Deep Security DPI Rule Name: 1004829 - Oracle AutoVue AutoVueX ActiveX Control Remote File Creation Vulnerability
Software y versión afectados
- Oracle