Signature Detail

HTTP: Randomized Javascript Encodings Detection 3

This signature detects JavaScript randomization encoding. The session most likely contains exploit code and should be blocked. A successful attack could result in arbitrary code execution with the privileges of the browser's user, possibly Administrator

Extended Description

Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.

Affected Products

• Saschart sascam_webcam_server 2.6.5

References

• BugTraq: 33053
• CVE: CVE-2008-6898
• CVE: CVE-2009-4225
• URL: http://www.moxa.com
• URL: http://www.rec-sec.com/2010/01/25/aol-playlist-class-buffer-overflow/
• URL: http://www.activepdf.com/products/serverproducts/webgrabber/