Description
The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a "file///" URI in the sPath parameter to the Execute function.
References
- 20060705 Touch arbitrary file execute vulnerability mailing-list