PT-2006-4622 · Unknown · Touch Control Activex Control

Publicado

2006-07-21

·

Atualizado

2018-10-17

·

CVE-2006-3762

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Touch Control ActiveX control version 2.0.0.55
Description The issue allows remote attackers to read and possibly execute arbitrary files. This is achieved by using a "file///" URI in the sPath parameter to the Execute function.
Recommendations For version 2.0.0.55, consider restricting access to the Execute function to minimize the risk of exploitation. As a temporary workaround, avoid using the sPath parameter with "file///" URI in the affected function until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-3762

Produtos afetados

Touch Control Activex Control