CVE-2009-3573 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 5.7% (pctl 93)
Patch early
A public exploit exists.
Description
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 5.72% — more likely to be exploited than 93% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-10-06 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| emc | captiva pixtools distributed imaging |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities | 2009-10-01 |
References
- http://secunia.com/advisories/36896
- http://www.securityfocus.com/bid/36566
- http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html
- http://www.vupen.com/english/advisories/2009/2808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53555
- http://secunia.com/advisories/36896
- http://www.securityfocus.com/bid/36566
- http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html
- http://www.vupen.com/english/advisories/2009/2808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53555
→ the Explorer · watch your stack · NVD