vendor:
eGatherer ActiveX Control
by:
SecurityFocus
7.5
CVSS
HIGH
Remote Compromise
20
CWE
Product Name: eGatherer ActiveX Control
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
IBM eGatherer ActiveX Control Remote Compromise
It is reported that the IBM eGatherer ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a malicious website and may result in the silent installation of a malicious executable. A remote attacker may exploit this vulnerability in order to silently install a malicious executable on an affected system. An example of the exploit code is provided in the text.
Mitigation:
Users should ensure that the IBM eGatherer ActiveX control is not installed on their systems, and should ensure that any websites that they visit do not contain malicious code that could exploit this vulnerability.
