OSVDB ID: 35468 Title: Corel / Micrografx ActiveCGM Browser ActiveX (acgm.dll) Multiple Unspecified Overflows |
Info |
|
|
Dates |
||||
|
|
Description |
ActiveCGM contains a flaw that may allow a malicious user to execute arbitrary code on the remote system. The issue is triggered due to multiple unspecified boundary errors. It is possible that the flaw may allow code execution with privileges of the user resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access,
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unknown |
Solution |
Upgrade to version 7.1.4.19 or higher, as it has been reported to fix this vulnerability. Additionally, it is possible to correct the flaw by disabling the ActiveX control by setting the kill bit for CLSID 'F5D98C43-DB16-11cf-8ECA-0000C0FD59C7'. |
Products |
|
References |
|
Credit |
|