----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,700 different Windows applications.

Request your account, the Secunia Network Software Inspector (NSI):
http://secunia.com/network_software_inspector/

----------------------------------------------------------------------

TITLE:
Pegasus Imaging ImagXpress Two ActiveX Controls Insecure Methods

SECUNIA ADVISORY ID:
SA27095

VERIFY ADVISORY:
http://secunia.com/advisories/27095/

CRITICAL:
Less critical

IMPACT:
Manipulation of data

WHERE:
>From remote

SOFTWARE:
Pegasus Imaging ImagXpress 8.x
http://secunia.com/product/15958/

DESCRIPTION:
shinnai has discovered two vulnerabilities in Pegasus Imaging
ImagXpress, which can be exploited by malicious people to overwrite
or delete arbitrary files.

1) The PegasusImaging.ActiveX.ThumbnailXpres.1 ActiveX control
(PegasusImaging.ActiveX.ThumnailXpress1.dll) includes the insecure
"CacheFile" property, which can be exploited to delete arbitrary
files in context of the currently logged-on user.

2) The PegasusImaging.ActiveX.ImagXpress.8 ActiveX control
(PegasusImaging.ActiveX.ImagXpress8.dll) includes the insecure
"CompactFile()" method, which can be exploited to overwrite and
corrupt arbitrary files on the system in the context of the currently
logged-on user.

The vulnerabilities are confirmed in
PegasusImaging.ActiveX.ThumnailXpress1.dll version 1.0.45.0 and
PegasusImaging.ActiveX.ImagXpress8.dll version 8.0.41.0 included in
Pegasus Imaging ImagXpress version 8.0. Other versions may also be
affected.

SOLUTION:
Set the kill-bit for the affected ActiveX controls.

PROVIDED AND/OR DISCOVERED BY:
shinnai

ORIGINAL ADVISORY:
http://shinnai.altervista.org/exploits/txt/TXT_wfv7ZG0G6KnQlk1SieLd.html
http://shinnai.altervista.org/exploits/txt/TXT_3DQ1nIkI6zmWCek4zP5U.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------