Micosoft Whale IAG ActiveX Remote Buffer Overflow Vulnerabilities
RISK: Medium Risk
Multiple vulnerabilities have been identified in Microsoft Whale Communications Intelligent Application Gateway (IAG) 2007, which could be exploited by remote attackers to comrpromise an affected system. These issues are caused by buffer overflow errors in the "WhlMgr.dll" ActiveX control when processing a specially crafted arguments passed to the "CheckForUpdates()" or "UpdateComponents()" method, which could be exploited to execute arbitrary code by tricking a user into visiting a malicious web page.
Impact
- Remote Code Execution
System / Technologies affected
- Microsoft Whale Communications Intelligent Application Gateway (IAG) 2007 versions prior to 3.7
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
Upgrade to Microsoft Whale Communications Intelligent Application Gateway (IAG) 2007 version 3.7 SP2 :
http://technet.microsoft.com/en-us/library/dd282918.aspx
Vulnerability Identifier
Source
Related Link
Share with