Description
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions.
References
- 20061211 [SBDA] SiteKiosk - FileSystem Access mailing-list
- 21567 vdb-entry
- sitekiosk-activex-information-disclosure(30878) vdb-entry
- http://www.sitekiosk.com/th_support/versions/index.php3?id=39
- ADV-2006-4985 vdb-entry
- 23253 third-party-advisory