[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution
- From: nospam@xxxxxxxx
- Date: Thu, 25 Apr 2013 02:43:53 GMT
Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code
Execution
ActiveX Settings:
Binary path: C:\Program Files\Silk\Shared Files\teechart.ocx
CLSID: {008BBE7E-C096-11D0-B4E3-00A0C901D681}
ProgID: TeeChart.TChart
Version: 4.0.0.7
Safe for Scripting (IObjectSafety): True
Safe for Initialization (IObjectSafety): True
AddSeries method is vulnerable, see http://www.osvdb.org/show/osvdb/74446
//rgod