Signature Detail

HTTP: Microsoft CAPICOM Certificates ActiveX

This signature detects attempts to exploit a known vulnerability in Microsoft CAPICOM. An attacker can create malicious Web pages containing dangerous JavaScript, which if accessed by a victim, can allow the attacker to execute code on the client.

Extended Description

The Microsoft CAPICOM ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page.

Affected Products

• Microsoft biztalk_server_2004_developer_edition SP1
• Microsoft biztalk_server_2004_developer_edition SP2
• Microsoft biztalk_server_2004_enterprise_edition SP1
• Microsoft biztalk_server_2004_enterprise_edition SP2
• Microsoft biztalk_server_2004_partner_edition SP1
• Microsoft biztalk_server_2004_partner_edition SP2
• Microsoft biztalk_server_2004_standard_edition SP1
• Microsoft biztalk_server_2004_standard_edition SP2
• Microsoft capicom_activex_control
• Microsoft platform_sdk_:_capicom_activex_control

References

• BugTraq: 23782
• CVE: CVE-2007-0940
• URL: http://msdn2.microsoft.com/en-us/library/aa388154.aspx