Description
RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files.
References
- http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-009.txt
- 25591 vdb-entry
- remotedocs-directories-info-disclosure(36654) vdb-entry
- 20070917 SYMSA-2007-009: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure mailing-list
- 3150 third-party-advisory
- ADV-2007-3199 vdb-entry
- 26835 third-party-advisory
- 1018703 vdb-entry