Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-5293
cve-2011-5293
threedify designer
activex control
remote attackers
file write vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.5%
The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument.
Affected configurations
Node
threediffythreedify_designerMatch5.0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| threediffy:threedify_designer | threediffy threedify designer | eq | 5.0.2 |
References
Related
prion
prion
Design/Logic Flaw
2015-01-01 02:59:00
nvd
nvd
CVE-2011-5293
2015-01-01 02:59:09
cvelist
cvelist
CVE-2011-5293
2022-10-03 16:15:12
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.5%
Related for CVE-2011-5293