Design/Logic Flaw

Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control PDIControl.dll 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the 1 SetLogFileName and 2 WriteToLog methods...

PT-2009-5856 · Emc · Emc Captiva Pixtools Distributed Imaging

Name of the Vulnerable Software and Affected Versions: EMC Captiva PixTools Distributed Imaging version 2.2 Description: The issue concerns insecure methods in the PDIControl.PDI.1 ActiveX control, allowing remote attackers to create or overwrite arbitrary files. This is achieved via the...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method...

VMware IntraProcessLogging.dll 5.5.3.42958 - Arbitrary Data Write

VMware IntraProcessLogging.dll 5.5.3.42958 - Arbitrary Data Write GoodFellas Security Research Team Technical Details ----------------- SetLogFileName method receives one argument filename in this format "c:\path\file". Proof of Concept ---------------- object id=ctrl classid="clsid:AF13B07E-2...

VMware IntraProcessLogging.dll 5.5.3.42958 Arbitrary Data Write Exploit

Exploit for unknown platform in category remote exploits ======================================================================= VMware IntraProcessLogging.dll 5.5.3.42958 Arbitrary Data Write Exploit ======================================================================= GoodFellas Security Rese...

VMware 'IntraProcessLogging.dll' 5.5.3.42958 - Arbitrary Data Write

GoodFellas Security Research Team Technical Details ----------------- SetLogFileName method receives one argument filename in this format "c:\path\file". Proof of Concept ---------------- object id=ctrl classid="clsid:AF13B07E-...