Overview The ActiveX control Cenroll permits unauthorized users to create files on the local system. The Cenroll control is contained in the xenroll.dll library. Using the call Enroll.
Nothing restricts the name or size of the file that can be created.
An attacker can create files with arbitrary names. The contents of the file can be influenced by the intruder, but it is unclear if the influence can be leveraged in any useful way. This prevents attackers from using the control simply to create large numbers of files. To the best of our knowledge, there does not exist a general purpose fix to the problem. This document was written by Shawn V Hernan.