FlexCell Grid Control ActiveX Arbitrary File Overwrite Vulnerability

Summary
This host is installed with FlexCell Grid Control ActiveX and is prone to arbitrary File Overwrite vulnerability.
Impact
Successful exploitation will let the attacker execute arbitrary codes. Impact Level: System/Application
Insight
The vulnerability is due to an error in the 'httpDownloadFile' method in the 'FlexCell.ocx' component file.
Affected
FlexCell Grid Control ActiveX 5.7.1 and prior on all Windows Platform. Workaround: Set the killbit for the affected ActiveX control. http://support.microsoft.com/kb/240797
References