PT-2009-5856 · Emc · Emc Captiva Pixtools Distributed Imaging

Published 2009-10-06 · Updated 2024-02-14 · CVE-2009-3573

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Captiva PixTools Distributed Imaging version 2.2

Description The issue concerns insecure methods in the PDIControl.PDI.1 ActiveX control, allowing remote attackers to create or overwrite arbitrary files. This is achieved via the SetLogFileName and WriteToLog methods.

Recommendations For EMC Captiva PixTools Distributed Imaging version 2.2, consider disabling the SetLogFileName and WriteToLog methods as a temporary workaround until a patch is available. Restrict access to the PDIControl.PDI.1 ActiveX control to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2009-3573

Affected Products

Emc Captiva Pixtools Distributed Imaging

References · 7

• 🔥 http://shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html · Exploit
• 🔥 https://exploit-db.com/exploits/33263 · Exploit
• 🔥 http://securityfocus.com/bid/36566 · Exploit
• http://vupen.com/english/advisories/2009/2808 · Vendor Advisory
• http://secunia.com/advisories/36896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3573 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53555 · Note