Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Windows >> VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability


Vulnerability Assessment Details

VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability

Vulnerability Assessment Summary
Checks version of ConfigChk ActiveX control

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote Windows host has an ActiveX control that is affected by a
buffer overflow vulnerability.

Description :

The ConfigChk ActiveX control, included with a VeriSign's PKI product
on the remote host and marked as safe for scripting, is reportedly
affected by a buffer overflow vulnerability involving its
'VerCompare()' method.

If a possible hacker can trick a user on the affected host into visiting a
specially-crafted web page, he may be able to leverage this issue to
execute arbitrary code on the host subject to the user's rights.

See also :

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0520.html
http://www.kb.cert.org/vuls/id/308087
http://www.verisign.com/support/advisories/page_040740.html

Solution :

Apply the vendor patch and verify that the file version of the
associated 'VSCnfChk.dll' is 2.0.0.3 or later.

Network Security Threat Level:

High / CVSS Base Score : 8.0
(AV:R/AC:H/Au:NR/C:C/I:C/A:C/B:N)

Networks Security ID: 22671

Vulnerability Assessment Copyright: This script is Copyright (C) 2007 Tenable Network Security

Cables, Connectors


Intel Core i7-7800x CPU processor sr3nh 3.50ghz 6-Core 8.25mb lga-2066 X series picture

Intel Core i7-7800x CPU processor sr3nh 3.50ghz 6-Core 8.25mb lga-2066 X series

$41.39



Intel - Core i7-12700K Desktop Processor 12 (8P+4E) Cores up to 5.0 GHz Unloc... picture

Intel - Core i7-12700K Desktop Processor 12 (8P+4E) Cores up to 5.0 GHz Unloc...

$249.99



Intel - Core i5-12600K Desktop Processor 10 (6P+4E) Cores up to 4.9 GHz Unloc... picture

Intel - Core i5-12600K Desktop Processor 10 (6P+4E) Cores up to 4.9 GHz Unloc...

$178.99



Intel - Core i9-14900K 14th Gen 24-Core 32-Thread - 4.4GHz (6.0GHz Turbo) Soc... picture

Intel - Core i9-14900K 14th Gen 24-Core 32-Thread - 4.4GHz (6.0GHz Turbo) Soc...

$544.99



AMD Ryzen 9 5950X 16-core 32-thread Desktop Processor picture

AMD Ryzen 9 5950X 16-core 32-thread Desktop Processor

$329.99



AMD Ryzen 9 5950X 16-core 32-thread Desktop Processor picture

AMD Ryzen 9 5950X 16-core 32-thread Desktop Processor

$399.00



AMD Ryzen 5 5500 6-Core 3.6GHz Socket AM4 65W CPU Desktop Processor picture

AMD Ryzen 5 5500 6-Core 3.6GHz Socket AM4 65W CPU Desktop Processor

$98.20



AMD Ryzen 5 4500 6-Core 3.6GHz Socket AM4 65W CPU Desktop Processor picture

AMD Ryzen 5 4500 6-Core 3.6GHz Socket AM4 65W CPU Desktop Processor

$78.50



Intel Core i7-7700K @ 4.20GHz - LGA 1151 Quad-Core Desktop Processor picture

Intel Core i7-7700K @ 4.20GHz - LGA 1151 Quad-Core Desktop Processor

$118.00



Intel Core i5-8500 Six Core Desktop PC CPU Processor 3.00GHz LGA1151 SR3XE picture

Intel Core i5-8500 Six Core Desktop PC CPU Processor 3.00GHz LGA1151 SR3XE

$47.00



Discussions

No Discussions have been posted on this vulnerability.