Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method...

VMware IntraProcessLogging.dll 5.5.3.42958 - Arbitrary Data Write

VMware IntraProcessLogging.dll 5.5.3.42958 - Arbitrary Data Write GoodFellas Security Research Team Technical Details ----------------- SetLogFileName method receives one argument filename in this format "c:\path\file". Proof of Concept ---------------- object id=ctrl classid="clsid:AF13B07E-2...