AtHocGov.IWSAlerts.ActiveX.Buffer.Overflow

Release Date Nov 11, 2009
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt to exploit a memory-corruption vulnerability in AtHocGov IWSAlerts. The vulnerability is located in the "AtHocGovTBr.dll" ActiveX control through misuse of the "CompleteInstallation()" property. It may allow remote attackers to execute arbitrary code in the context of the application using the affected ActiveX control.
Affected Products AtHocGov IWSAlerts 6.1.4.36
Recommended Actions Refer to the vendor's website for the suggested workaround: http://www.athoc.com/products/IWSAlerts_overview.aspx
Coverage IPS VCM
Reference/s http://www.athoc.com/products/IWSAlerts_overview.aspx

Fortinet