SnoopyAssault has reported a vulnerability in the GeoVision LiveX ActiveX control, which can be exploited by malicious people to overwrite arbitrary files.

The vulnerability is caused due to the ActiveX control providing the insecure "SnapShotToFile()" method and can be exploited to corrupt arbitrary files in the context of the currently logged-on user.

The vulnerability is reported in versions 8.1.2 and 8.2.0. Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX control.

Provided and/or discovered by
SnoopyAssault, Nine Situations Group

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/8059

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers