An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors.
http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf
http://www.securityfocus.com/bid/53591