1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Home
  2. Security
  3. Security Lab
  4. Latest Threats
  5. Vulnerability Descriptions
  6. SA31898

GdPicture Light Imaging Toolkit ActiveX Control "SaveAsPDF()" Insecure Method

Report ID: SA31898
Source: Secunia
Date of Discovery: 01.10.2008
Criticality: Urgent
Affects:
GdPicture Light Imaging Toolkit 4.x
Compromise From: From remote
Compromise Type: System access

Summary

A vulnerability has been discovered in GdPicture Light Imaging Toolkit, which potentially can be exploited by malicious people to compromise a user's system.

Detailed Description

A vulnerability has been discovered in GdPicture Light Imaging Toolkit, which potentially can be exploited by malicious people to compromise a user's system.


The vulnerability is caused due to the GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) including the insecure "SaveAsPDF()" method. This can be exploited to overwrite arbitrary files on the system in the context of the currently logged-on user.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in gdpicture4s.ocx version 4.7.0.1 included in GdPicture Light Imaging Toolkit version 4.7.1. Other versions may also be affected.

Solution

Set the kill-bit for the affected ActiveX control.