{"id":"CVE-2009-3573","aliases":["EUVD-2009-3554","GHSA-hfjj-9f59-p559"],"status":"published","title":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll)...","description":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05719,"percentile":0.93088,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2009-10-06T20:19:00Z","modified":"2026-06-16T23:11:55Z","exploits":[{"source":"exploitdb","id":"EDB-33263","title":"EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities","type":"remote","platform":"windows","date":"2009-10-01","verified":true,"url":"https://www.exploit-db.com/exploits/33263"}],"products":[{"vendor":"emc","product":"captiva_pixtools_distributed_imaging"}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/2808","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html","tags":["x_refsource_MISC","x_transferred","Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/36566","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://secunia.com/advisories/36896","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3573"},{"url":"https://github.com/advisories/GHSA-hfjj-9f59-p559"}],"sources":{"cve":[{"id":"CVE-2009-3573","description":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.","status":"published","published":"2009-10-06T20:19:00Z","modified":"2024-08-07T06:31:10.503Z","updated_at":"2026-11-02T14:33:24.10565Z"}],"euvd":[{"id":"EUVD-2009-3554","description":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.","status":"published","published":"2009-10-06T20:19:00Z","modified":"2024-08-07T06:31:10Z","updated_at":"2026-11-03T01:39:13.262818Z"}],"ghsa":[{"id":"GHSA-hfjj-9f59-p559","title":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll)...","description":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.","status":"published","published":"2022-05-02T03:46:25Z","modified":"2023-01-31T05:07:56Z","updated_at":"2026-11-02T14:49:18.423365Z"}],"nvd":[{"id":"CVE-2009-3573","description":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.","status":"published","published":"2009-10-06T20:30:00.377Z","modified":"2026-06-16T23:11:55.663Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:37.004244Z"}]}}