Intrusion Prevention

TeeChart.Professional.ActiveX.Code.Execution

Description

This indicates an attack attempt against an Integer Overflow vulnerability in TeeChart Professional ActiveX Control.
The vulnerability, which is located in multiple TeeChart ActiveX control, can be exploited through misuse of a vulnerable method "AddSeries". An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the application.

Affected Products

TeeChart5.ocx Version 5.0.1.0
TeeChart6.ocx Version 6.0.0.5
TeeChart7.ocx Version 7.0.1.4
TeeChart8.ocx Version 8.0.0.8
TeeChart2010.ocx Version 2010.0.0.3

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch or updates available for this issue.
Disable this ActiveX Control by setting its kill bit, by the method shown on the website: http://support.microsoft.com/kb/240797

CVE References

CVE-2011-4034