{"api_version":"1","generated_at":"2026-07-23T10:53:06+00:00","cve":"CVE-2009-3573","urls":{"html":"https://cve.report/CVE-2009-3573","api":"https://cve.report/api/cve/CVE-2009-3573.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-3573","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-3573"},"summary":{"title":"CVE-2009-3573","description":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-10-06 20:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html","name":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/36566","name":"http://www.securityfocus.com/bid/36566","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"EMC Captiva PixTools Distributed Imaging ActiveX Control Multiple Insecure Method Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/2808","name":"http://www.vupen.com/english/advisories/2009/2808","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/36896","name":"http://secunia.com/advisories/36896","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"EMC Captiva PixTools Distributed Imaging ActiveX Control Insecure Methods - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3573","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3573","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"3573","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"emc","cpe5":"captiva_pixtools_distributed_imaging","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:31:10.503Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2009-2808","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/2808"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html"},{"name":"captiva-pixtools-activex-file-overwrite(53555)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555"},{"name":"36566","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/36566"},{"name":"36896","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36896"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-10-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ADV-2009-2808","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/2808"},{"tags":["x_refsource_MISC"],"url":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html"},{"name":"captiva-pixtools-activex-file-overwrite(53555)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555"},{"name":"36566","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/36566"},{"name":"36896","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36896"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-3573","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2009-2808","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/2808"},{"name":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html","refsource":"MISC","url":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html"},{"name":"captiva-pixtools-activex-file-overwrite(53555)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555"},{"name":"36566","refsource":"BID","url":"http://www.securityfocus.com/bid/36566"},{"name":"36896","refsource":"SECUNIA","url":"http://secunia.com/advisories/36896"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-3573","datePublished":"2009-10-06T20:19:00.000Z","dateReserved":"2009-10-06T00:00:00.000Z","dateUpdated":"2024-08-07T06:31:10.503Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-10-06 20:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:captiva_pixtools_distributed_imaging:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C4F21D5-C02D-45CE-BDF6-6BF227DB5BE3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"3573","Ordinal":"1","Title":"CVE-2009-3573","CVE":"CVE-2009-3573","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"3573","Ordinal":"1","NoteData":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.","Type":"Description","Title":"CVE-2009-3573"},{"CveYear":"2009","CveId":"3573","Ordinal":"2","NoteData":"2009-10-06","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"3573","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}