CVE-2011-1744 EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted we...
MediumCVSS 5.8
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc captiva einput | < 2.1.1.37 | 2.1.1.37 |
References
- 8319 third-party-advisory
- 20110726 ESA-2011-024: EMC Captiva eInput multiple vulnerabilities mailing-list third-party-advisory vdb-entry