PT-2011-2272

CVE-2011-0329

·

Published

2011-02-21

·

Updated

2011-03-18

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions DellSystemLite.ocx version 1.0.0.0
Description The issue allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter of the GetData method in the DellSystemLite.Scanner ActiveX control.
Recommendations For DellSystemLite.ocx version 1.0.0.0, avoid using the fileID parameter in the GetData method until the issue is resolved. Consider restricting access to the DellSystemLite.Scanner ActiveX control to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2011-0329
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com