Quest vWorkspace version 7.5 Connection Broker client active-x control pnllmcli.dll version 7.5.304.547 suffers from a SaveMiniLaunchFile() method remote file creation / overwrite vulnerability.
1374e5faa52d12488546d133528c7d7597d9e842bbf2b7a9ba602df0b39708c0