PT-2009-6183 · Microsoft+1 · Internet Explorer+2

Published 2009-11-19 · Updated 2017-08-17 · CVE-2009-3977

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager (OV NNM) version 7.53

Description The issue is related to multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx. This could allow remote attackers to cause a denial of service or have other unspecified impacts via a long string argument to certain methods, including the DisplayName, AddGroup, InstallComponent, or Subscribe method. However, this issue may not be a vulnerability in many environments because the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.

Recommendations For HP OpenView Network Node Manager (OV NNM) version 7.53, consider restricting access to the ActiveX control in ActiveDom.ocx to minimize the risk of exploitation. As a temporary workaround, consider disabling the DisplayName, AddGroup, InstallComponent, and Subscribe methods until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3977

Affected Products

Activedom.Ocx

Hp Openview Network Node Manager

Internet Explorer

References · 4

• 🔥 http://seclists.org/fulldisclosure/2009/Nov/199 · Exploit
• 🔥 http://coresecurity.com/content/openview_nnm_internaldb_dos · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3977 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54377 · Note