CVE-2009-3573

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/36896Vendor Advisory
http://www.securityfocus.com/bid/36566Exploit
http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.htmlExploit, URL Repurposed
http://www.vupen.com/english/advisories/2009/2808Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53555
http://secunia.com/advisories/36896Vendor Advisory
http://www.securityfocus.com/bid/36566Exploit
http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.htmlExploit, URL Repurposed
http://www.vupen.com/english/advisories/2009/2808Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53555

Timeline

Published: Oct 6, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-35749.3Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in CVE-2009-357510.0Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of se CVE-2009-35769.3Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Sc CVE-2009-35779.3Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a M CVE-2009-35789.3Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1)CVE-2009-35794.3Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attacke CVE-2009-35806.8Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitr CVE-2009-35813.5Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or CVE-2009-35826.5Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary S CVE-2009-35835.1Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary CVE-2009-35845.0SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to cap CVE-2009-35855.8Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.