Update Protection against Microsoft Rich Textbox Control SaveFile File Overwrite Vulnerability
| Check Point Reference: | CPAI-2008-018 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | ISS X-Force Databse: 39557 | |
| Industry Reference(s): | CVE-2008-0237 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Microsoft Visual Studio 6.0 | ||
| Vulnerability Description A file overwriting vulnerability exists in Microsoft Rich Textbox control ActiveX control. Microsoft Rich Textbox is an ActiveX control that comes with Visual Basic. It allows programs to create formatted text in Rich Text Format. Microsoft Rich Textbox control (ActiveX control Richtx32.ocx) is used for displaying, entering, and manipulating text with formatting. It can also display fonts, colors, and links, and load text and embedded images from a file. By convincing a user to visit a specially crafted web page, a remote attacker may trigger this vulnerability to execute arbitrary code on an affected system. |
||
|
Vulnerability Details This vulnerability is due to lack of verification in the Microsoft Rich Textbox Control ActiveX control when handling arguments sent to a certain method. To trigger this issue, an attacker may create a malicious web page that will exploit this flaw. Successful exploitation may allow creating or modifying arbitrary files on the vulnerable system. |
Protection Overview
By enabling this protection, SmartDefense will detect and block the vulnerable ActiveX Control. Depending on the traffic mix, activating this protection may result in performance degradation.
In order for the protection to be activated, update your VPN-1/InterSpect product to the latest SmartDefense update. For information on how to update SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.