CVE-2011-5289

2022-10-0316:15:12

mitre

www.cve.org

chilkatcrypt2

chilkatomadrm

atube catcher 2.3.570

remote attackers

arbitrary files

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument.

References

www.htbridge.com/advisory/HTB23013