CVE-2011-5293

2022-10-0316:15:12

mitre

www.cve.org

threedify designer 5.0.2

activex control

remote attackers

arbitrary files

pathname

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument.

References

www.htbridge.com/advisory/HTB23020