36896Third-party advisory
http://secunia.com/advisories/36896 CVE-2009-3573
EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities
Record summary
CVE-2009-3573 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.
Description
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBEMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method VulnerabilitiesExploitDB exploitby Giuseppe FuggianoNot analyzed1 file
References
636566vdb entry
http://www.securityfocus.com/bid/36566 shinnai.net
http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html ADV-2009-2808vdb entry
http://www.vupen.com/english/advisories/2009/2808 captiva-pixtools-activex-file-overwrite(53555)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/53555 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-3573