FlexCell Grid Control (ActiveX) Multiple Arbitrary File Overwrite Vulnerabilities
BID:33453
Info
FlexCell Grid Control (ActiveX) Multiple Arbitrary File Overwrite Vulnerabilities
| Bugtraq ID: | 33453 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2009 12:00AM |
| Updated: | Sep 28 2009 07:30PM |
| Credit: | Houssamix |
| Vulnerable: |
FlexCell Technologies FlexCell Grid Control (ActiveX) 5.6.9 |
| Not Vulnerable: |
FlexCell Technologies FlexCell Grid Control (ActiveX) 5.8 |
Discussion
FlexCell Grid Control (ActiveX) Multiple Arbitrary File Overwrite Vulnerabilities
FlexCell Grid Control (ActiveX) is prone to two vulnerabilities that let attackers overwrite files with arbitrary, attacker-controlled content.
Successfully exploiting these issues will allow an attacker to corrupt and overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
FlexCell Grid Control (ActiveX) 5.6.9 is vulnerable; other versions may also be affected.
FlexCell Grid Control (ActiveX) is prone to two vulnerabilities that let attackers overwrite files with arbitrary, attacker-controlled content.
Successfully exploiting these issues will allow an attacker to corrupt and overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
FlexCell Grid Control (ActiveX) 5.6.9 is vulnerable; other versions may also be affected.
Exploit / POC
FlexCell Grid Control (ActiveX) Multiple Arbitrary File Overwrite Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting victim into viewing a malicious webpage.
The following exploit is available:
To exploit these issues, an attacker must entice an unsuspecting victim into viewing a malicious webpage.
The following exploit is available:
Solution / Fix
FlexCell Grid Control (ActiveX) Multiple Arbitrary File Overwrite Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
FlexCell Grid Control (ActiveX) Multiple Arbitrary File Overwrite Vulnerabilities
References:
References:
- FlexCell Grid Control Homepage (FlexCell Technologies)
- Microsoft Knowledge Base Article 240797 (Microsoft)