Bennet.Tec.TList.ActiveX.Control.Arbitrary.File.Creation

description-logoDescription

This indicates an attack attempt to exploit a Remote File Creation vulnerability in Bennet-Tec Tlist.
The vulnerability which is located in the "TListX.ocx" ActiveX control, where X is the version number from 6 to 8, can be exploited through misuse of a vulnerable method. As a result, a remote attacker can potentially create or overwrite arbitrary files within the system.

affected-products-logoAffected Products

Bennet-Tec TList 6
Bennet-Tec TList 7
Bennet-Tec TList 8

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems

recomended-action-logoRecommended Actions

Disable this ActiveX Control by setting its kill bit, by the method shown on the website: http://support.microsoft.com/kb/240797

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)