Bugtraq mailing list archives

Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution

From: nospam () gmail it
Date: Thu, 25 Apr 2013 02:43:53 GMT

Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution

ActiveX Settings:
Binary path: C:\Program Files\Silk\Shared Files\teechart.ocx
CLSID: {008BBE7E-C096-11D0-B4E3-00A0C901D681}
ProgID: TeeChart.TChart
Version: 4.0.0.7
Safe for Scripting (IObjectSafety): True
Safe for Initialization (IObjectSafety): True

AddSeries method is vulnerable, see http://www.osvdb.org/show/osvdb/74446

//rgod

Current thread:

Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution nospam (Apr 26)