vendor:
Multiple Products
by:
41.w4r10r
7.5
CVSS
HIGH
ActiveX Remote SEH Overwrite
CWE
Product Name: Multiple Products
Affected Version From: F-Secure Anti-Virus 2010
Affected Version To: F-Secure Internet Security 2011
Patch Exists: YES
Related CWE:
CPE:
Platforms Tested: Windows XP SP2 Eng, IE 6,7,8
2011
F-Secure Multiple Products ActiveX Remote SEH Overwrite Vulnerability(Heap Spray)
This exploit takes advantage of a SEH (Structured Exception Handling) overwrite vulnerability in multiple F-Secure products. It uses heap spray techniques to exploit the vulnerability.
Mitigation:
Update to the latest version of F-Secure products or apply the vendor's patch.
