Borland Silk Central 'TeeChart' ActiveX Control Remote Code Execution Vulnerability

Bugtraq ID:	67255
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 05 2014 12:00AM
Updated:	May 05 2014 12:00AM
Credit:	Andrea Micalizzi aka rgod
Vulnerable:	Micro Focus Borland Silk Central 0
Not Vulnerable:

Borland Silk Central 'TeeChart' ActiveX Control Remote Code Execution Vulnerability

Borland Silk Central is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

Borland Silk Central 'TeeChart' ActiveX Control Remote Code Execution Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Borland Silk Central 'TeeChart' ActiveX Control Remote Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Borland Silk Central 'TeeChart' ActiveX Control Remote Code Execution Vulnerability

References:

• Borland Silk Central Homepage (Micro Focus)
  
• (0day) Borland Silk Central TeeChart ActiveX Control GridLink Remote Code Execut (zero day initiative)