CVE-2009-3573
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2)…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 5.72% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- emc/captiva pixtools distributed imaging
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/36896Vendor Advisory
- http://www.securityfocus.com/bid/36566Exploit
- http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.htmlExploit, URL Repurposed
- http://www.vupen.com/english/advisories/2009/2808Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53555
- http://secunia.com/advisories/36896Vendor Advisory
- http://www.securityfocus.com/bid/36566Exploit
- http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.htmlExploit, URL Repurposed
- http://www.vupen.com/english/advisories/2009/2808Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53555
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.