Description
EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site.
References
- 20110726 ESA-2011-024: EMC Captiva eInput multiple vulnerabilities mailing-list
- 8319 third-party-advisory