WEB-ACTIVEX Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow (CVE-2008-0955)

Rule ID

1054991

Severity

High

Description

A stack buffer overflow vulnerability was disclosed in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder() property of CTSUEng.ocx an attacker may be able to execute arbitrary code.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Buffer Overflow

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

Reference

Keyword

N/A