Secunia

A vulnerability has been discovered in Oracle Document Capture, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to a design error in the BLACKICEDEVMODE.BlackIceDEVMODECtrl.1 ActiveX control (BlackIceDEVMODE.ocx). This can be exploited to set a custom application started with custom parameters for an existing printer, via calls to the "SetApplicationPath()" and "SetCustomStartAppParameter()" methods.

Successful exploitation may allow execution of arbitrary commands when a document is printed using the altered printer.

The vulnerability is confirmed in BlackIceDEVMODE.ocx version 2.2.1.0 included in Oracle Document Capture 10.1.3.5.0. Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX control.

Provided and/or discovered by
Nine Situations Group

Original Advisory
http://retrogod.altervista.org/9sg_oracle_devmode_ii.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area