Secunia

shinnai has discovered a vulnerability in the EMC Captiva PixTools Distributed Imaging ActiveX control, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a design error in the PDIControl.PDI.1 ActiveX control (PDIControl.dll). This can be exploited to append arbitrary data to arbitrary files by calling the "SetLogFileName()" and "WriteToLog()" ActiveX methods.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in PDIControl.dll version 2.2.3160.0. Other versions may also be affected.

Solution
Apply patches (please see EMC Security Advisory ESA-09-018 for details).
Further details available in Customer Area

Provided and/or discovered by
shinnai

Changelog
Further details available in Customer Area

Original Advisory
http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area