Quest Toad DBA Suite for Oracle ActiveX Control Arbitrary File Overwrite Vulnerability

Bugtraq ID:	52920
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 05 2012 12:00AM
Updated:	Apr 05 2012 12:00AM
Credit:	retrogod
Vulnerable:	Quest Software Toad DBA Suite for Oracle 0
Not Vulnerable:

Quest Toad DBA Suite for Oracle ActiveX Control Arbitrary File Overwrite Vulnerability

Quest Toad DBA Suite for Oracle ActiveX control is prone to an arbitrary-file-overwrite vulnerability.

Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application that is using the ActiveX control (typically Internet Explorer).

Quest Toad DBA Suite for Oracle ActiveX Control Arbitrary File Overwrite Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage.

Quest Toad DBA Suite for Oracle ActiveX Control Arbitrary File Overwrite Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Quest Toad DBA Suite for Oracle ActiveX Control Arbitrary File Overwrite Vulnerability

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Quest Toad for Oracle Explain Plan Display ActiveX Control (Retrogod)
  
• Toad DBA Suite for Oracle Homepage (Quest)
  
• Quest Toad for Oracle Explain Plan Display ActiveX Control (QExplain2.dll 6.6.1. (Retrogod)