pyrokinesis has discovered a vulnerability in multiple EMC Captiva products, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the inclusion of a vulnerable KeyHelp ActiveX control.

For more information:
SA36905

The vulnerability is confirmed in KeyHelp.ocx version 1.2.3120.0 included in EMC Captiva QuickScan Pro demo version 4.6.1 build 8372, and reported in the following products and versions:
* EMC Captiva InputAccel 6.0 SP1 and earlier versions
* EMC Captiva Dispatcher 6.0 SP1 and earlier versions
* EMC Captiva InputAccel for Invoices 3.1 SP1 and earlier versions
* EMC Captiva PixTools 8.3 and earlier versions
* EMC Captiva FormWare 5.3 SP2 and earlier versions
* EMC Captiva ClaimPack 3.7 SP1 and earlier versions

Solution
Update KeyHelp to version 1.5:
Further details available to Secunia VIM customers

Provided and/or discovered by
Nine:Situations:Group::pyrokinesis

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://retrogod.altervista.org/9sg_emc_keyhelp.html

Other references
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers