Our system admin ran a Nessus scan on our Laserfiche installation which revealed a vulnerable ActiveX control on a fresh virtual machine who's only unique properties are housing the QuickFields, QF Barcode, and QF Agent applications.
Quick Fields - Version 9.0.0
Quick Fields Barcode - 9.1.0.0
Quick Fields Agent - 9.0
Here's the results of the scan:
Synopsis :
The remote host has an ActiveX control installed that has multiple
vulnerabilities.
Description :
The remote host has KeyWorks KeyHelp ActiveX control installed, which
is affected by multiple vulnerabilities :
- Multiple stack-based buffer overflows exist that could
allow an attacker to execute arbitrary code.
(CVE-2012-2515)
- An unspecified command injection vulnerability.
(CVE-2012-2516)
See also :
http://retrogod.altervista.org/9sg_emc_keyhelp.html
http://sotiriu.de/adv/NSOADV-2010-008.txt
Solution :
Remove or disable the control as it is no longer supported.
Risk factor :
High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 8.4
(CVSS2#E:F/RL:W/RC:ND)
Public Exploit Available : true
Would someone be able to confirm if this is part of the Quick Fields application set and what impact disabling the control would have?
Cheers,
Carl