This overview provides information about security considerations related to still images. This document does not provide all you need to know about security issues?instead, use it as a starting point and reference for this technology area.
When using IStillImage::RegisterLaunchApplication to register an application to receive device events, be sure to surround the path and filename of the application with quotation marks. This avoids the possibility that the path is misinterpreted and an unauthorized application is run.
When an application is registered to receive a device event, that application can be run by any user that has access to that device. For example, if an application is registered for a scan event, pressing the "scan" button on a scanner will cause that application to run. If the application runs with a higher privilege than the user has, this causes a potential security issue.