This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.
This signature detects multiple file-corruption vulnerabilities in the DB Software Laboratory ActiveX control.
VImpX is an ActiveX control that imports data into various databases.
DB Software Laboratory 'VImpX.ocx' ActiveX control is prone to multiple file-corruption vulnerabilities.
These issues affect the 'ClearLogFile()' and 'SaveToFile()' methods of the ActiveX control identified by CLSID:
Attackers can exploit these issues to delete or overwrite arbitrary files on the affected computer in the context of the application using the ActiveX control (typically Internet Explorer). Successful attacks can result in denial-of-service conditions. Additional attacks may be possible if the attacker can manipulate log data, but this has not been confirmed.
- VImpX 22.214.171.124 is vulnerable; other versions may also be affected.
Download and install all vendor patches related to this vulnerability.