Executive Summary

Informations
Name CVE-2010-0252 First vendor Publication 2010-02-10
Vendor Cve Last vendor Modification 2010-08-21

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0252

CWE : Common Weakness Enumeration

idName
CWE-94Failure to Control Generation of Code ('Code Injection')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:8424
 
Oval ID: oval:org.mitre.oval:def:8424
Title: Microsoft Data Analyzer ActiveX Control Vulnerability
Description: The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2010-0252
Version: 7
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Os1
Os3
Os2
Os8
Os6
Os3

OpenVAS Exploits

DateDescription
2011-04-13Name : Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control V...
File : nvt/secpod_ms11-027.nasl
2010-06-15Name : Computer Associates WebScan ActiveX Control Multiple Remote Code Execution Vu...
File : nvt/gb_ca_activex_mult_code_exec_vuln.nasl
2010-06-09Name : Microsoft Windows Kernel Mode Drivers Privilege Escalation Vulnerabilities (9...
File : nvt/secpod_ms10-032.nasl
2010-06-09Name : Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability ...
File : nvt/secpod_ms10-034.nasl
2010-02-10Name : Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)
File : nvt/secpod_ms10-006.nasl
2010-02-10Name : Microsoft Data Analyzer ActiveX Control Vulnerability (978262)
File : nvt/secpod_ms10-008.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
62246Microsoft Data Analyzer ActiveX Web Page Handling Unspecified Arbitrary Code ...

Snort® IPS/IDS

DateDescription
2014-01-10Symantec WinFax Pro ActiveX heap buffer overflow attempt
RuleID : 27208 - Revision : 3 - Type : BROWSER-PLUGINS
2014-01-10Microsoft Internet Explorer 8 Developer Tool ActiveX clsid access
RuleID : 16635 - Revision : 7 - Type : BROWSER-PLUGINS
2014-01-10Microsoft Data Analyzer 3.5 ActiveX clsid unicode access
RuleID : 16420 - Revision : 5 - Type : WEB-ACTIVEX
2014-01-10Microsoft Windows Data Analyzer 3.5 ActiveX clsid access
RuleID : 16419 - Revision : 9 - Type : BROWSER-PLUGINS

Nessus® Vulnerability Scanner

DateDescription
2010-06-09Name : The remote Windows host is missing an update that disables selected ActiveX c...
File : smb_nt_ms10-034.nasl - Type : ACT_GATHER_INFO
2010-02-09Name : The remote Windows host is missing an update that disables selected ActiveX c...
File : smb_nt_ms10-008.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
CERT http://www.us-cert.gov/cas/techalerts/TA10-040A.html
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
MS http://www.microsoft.com/technet/security/Bulletin/MS10-008.mspx
http://www.microsoft.com/technet/security/bulletin/ms10-034.mspx
SECUNIA http://secunia.com/advisories/38503
http://secunia.com/advisories/40059

Alert History

If you want to see full details history, please login or register.
0
1
2
DateInformations
2014-02-17 10:53:29
  • Multiple Updates
2014-01-19 21:26:33
  • Multiple Updates
2013-05-10 23:16:55
  • Multiple Updates