Oracle Document Capture empop3.dll — insecure method

Application: Oracle Document Capture **Versions Affected:**6.4 — 7.2 Vendor URL:http://www.oracle.com **Bugs:**Insecure method, File overwriting, File deleting **Exploits:**YES **Reported:**22.03.2010 **Vendor response:**31.03.2010 **Date of Public Advisory:**24.01.2011 **CVE-number:**CVE-2010-3591 Author: Evdokimov Dmitriy

Description
Oracle Document Capture contains ActiveX components that contain insecure methods in empop3.dll.

Business Risk
An attacker can send a malicious link to an unaware user via an e-mail, messaging or social networks. He also can insert this link into corporate portal. When clicking this link the end user browser will call vulnerable ActiveX component which can delete any file on victim’s workstation. It is possible to delete configuration files of critical binaries that can lead to denial of service attack and stopping business until files will be repaired. This scenario is critical if user works with SAP for Logistics or SAP for Banking applications.