Detections
Analytics

CSS Web Installer CSSWEBLib.Installer ActiveX InstallProduct1 Method Overflow

high Nessus Plugin ID 45043

Language:

Synopsis

The remote Windows host has an ActiveX control that is prone to a buffer overflow attack.

Description

The CSS Web Installer ActiveX control, a component of the Authentium Command On Demand virus scanner, installed on the remote Windows host reportedly is affected by a buffer overflow involving the 'InstallProduct1' method, and possibly the 'InstallProduct' and 'InstallProduct2' methods as well.

If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to execute arbitrary code on the affected system subject to the user's privileges.

Solution

Remove or disable the control as the product is no longer supported.

See Also

http://sotiriu.de/adv/NSOADV-2010-006.txt

https://seclists.org/fulldisclosure/2010/Mar/104

Plugin Details

Severity: High

ID: 45043

File Name: css_web_installer_activex.nasl

Version: 1.9

Type: local

Agent: windows

Family: Windows

Published: 3/11/2010

Updated: 4/11/2022

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 3/4/2010

Reference Information

BID: 38544

SECUNIA: 38844