Update Protection against LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control Code Execution Vulnerability
| Check Point Reference: | CPAI-2008-011 | |
| Date Published: | ||
| Severity: | ||
| Source: | Secunia Advisory: SA26181 | |
| Industry Reference(s): | CVE-2007-3955 | |
| Protection Provided by: |
VPN-1
|
|
| Who is Vulnerable? LinkedIn Internet Explorer Toolbar 3.0.2.1098 | ||
| Vulnerability Description A buffer overflow vulnerability exists in LinkedIn Internet Explorer Toolbar. LinkedIn is a popular business-oriented networking site. By convincing a user to visit a specially crafted web page, a remote attacker may trigger this vulnerability to execute arbitrary code on an affected system. |
||
|
Update/Patch Available Update to the latest version: LinkedIn Browser Toolbar |
|
|
Vulnerability Details This vulnerability is due to errors in the LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control when handling overly long arguments sent to the search method. To trigger this issue, an attacker may create a malicious web page that will exploit this flaw. Successful exploitation may allow execution of arbitrary code on the vulnerable system. |
Protection Overview
By enabling this protection, SmartDefense will detect and block the vulnerable ActiveX Control. Depending on the traffic mix, activating this protection may result in performance degradation.
In order for the protection to be activated, update your VPN-1/InterSpect product to the latest SmartDefense update. For information on how to update SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.