PT-2006-4622 · Unknown · Touch Control Activex Control

Published 2006-07-21 · Updated 2018-10-17 · CVE-2006-3762

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Touch Control ActiveX control version 2.0.0.55

Description The issue allows remote attackers to read and possibly execute arbitrary files. This is achieved by using a "file///" URI in the sPath parameter to the Execute function.

Recommendations For version 2.0.0.55, consider restricting access to the Execute function to minimize the risk of exploitation. As a temporary workaround, avoid using the sPath parameter with "file///" URI in the affected function until a patch is available.

Fix

Related Identifiers

CVE-2006-3762

Affected Products

Touch Control Activex Control

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-3762 · Security Note
• http://securityfocus.com/archive/1/439154/100/100/threaded · Note